WO2010100923A1 - Key sharing system - Google Patents
Key sharing system Download PDFInfo
- Publication number
- WO2010100923A1 WO2010100923A1 PCT/JP2010/001475 JP2010001475W WO2010100923A1 WO 2010100923 A1 WO2010100923 A1 WO 2010100923A1 JP 2010001475 W JP2010001475 W JP 2010001475W WO 2010100923 A1 WO2010100923 A1 WO 2010100923A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- information
- key
- communication terminal
- terminal
- encryption
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/065—Network architectures or network communication protocols for network security for supporting key management in a packet data network for group communications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
- H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/085—Secret sharing or secret splitting, e.g. threshold schemes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/041—Key generation or derivation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0431—Key distribution or pre-distribution; Key agreement
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0433—Key management protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
Definitions
- the present invention relates to a key sharing system, a communication terminal, a management device, a key sharing method, and a computer program.
- Patent Document 1 is known as a technique for sharing a key among a plurality of devices.
- the management device stores the encryption key information.
- the encryption key information of the user terminal is deleted.
- Non-Patent Document 1 discloses one technique of a secret sharing method called (k, n) threshold secret sharing method.
- the secret sharing method is a technique for safely storing the original secret information by dividing the secret information into a plurality of pieces and distributing and storing them.
- secret information is divided into n pieces of information (shares) and stored, and if k or more of them can be obtained, the original data can be restored. .
- Non-Patent Document 2 discloses a broadcast-type encryption technique that limits users who can view content through pay broadcasting or the like to limited users such as service subscribers.
- the content sender encrypts the content in such a manner that only the designated user group can decrypt it based on the key information distributed to all users.
- Patent Document 1 it is necessary to store the encryption key information for all user terminals in the management apparatus, and the information management load on the management apparatus becomes excessive.
- the key information to be shared is distributed and stored in each of the terminal and the management apparatus by the (k, n) threshold secret sharing method described in Non-Patent Document 1
- a terminal that leaves the key sharing group occurs In order to invalidate the distributed information of the terminal that leaves, all the terminals remaining in the key sharing group and all the distributed information stored in the management apparatus must be updated, and the load for the update is excessive.
- the present invention has been made in view of such circumstances, and its purpose is to reduce the amount of encryption key information stored in the management apparatus and when a terminal that leaves the key sharing group occurs. It is an object of the present invention to provide a key sharing system that can invalidate key information of a terminal that leaves a key sharing group without updating key information held by terminals remaining in the key sharing group.
- the key sharing system is the key sharing system comprising: a communication terminal belonging to the same group; and a management device that holds information for sharing an intra-group shared key between the communication terminals.
- a first communication terminal that generates individual terminal individual information for each of the intra-group shared key storage unit that stores the intra-group shared key and the second communication terminal of the communication terminals.
- Terminal key information generation for generating individual terminal key information for each of the second communication terminals using the information generation means, the terminal individual information storage means for storing the terminal individual information, and the terminal individual information Means, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information are used to generate encryption information common to the second communication terminal.
- Encrypted shared key information transmitting means wherein the management device receives encrypted shared key information from the first communication terminal, and the received encrypted shared key information receiving means.
- Encrypted shared key information storage means for storing key information; encrypted shared key information transmission means for transmitting encrypted shared key information stored in the encrypted shared key information storage means to the second communication terminal;
- the second communication terminal includes terminal key information receiving means for receiving terminal key information from the first communication terminal, and encrypted shared key information for receiving encrypted shared key information from the management apparatus.
- the decryption means for restoring the intra-group shared key using the received encrypted shared key information, and the first communication terminal leaves the group.
- the encryption information is updated using terminal individual information of only the second communication terminal remaining in the group, and the intra-group shared key is updated using the updated encryption information. Is transmitted to the management apparatus, and the encrypted shared key information stored in the management apparatus is updated.
- a communication terminal means the communication terminal in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals ( Terminal individual information for generating individual terminal individual information for each of the intra-group shared key storage means for storing the intra-group shared key and the second communication terminal of the communication terminals.
- the terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information are used to generate encryption information common to the second communication terminal.
- Encryption information generating means Encryption information generating means, encryption means for encrypting the intra-group shared key using the encryption information, and encryption for transmitting the encrypted shared key information obtained by the encryption to the management apparatus Shared key information transmission means, and when the second communication terminal that leaves the group occurs, encryption is performed using terminal-specific information of only the second communication terminal remaining in the group Encrypted shared key information stored in the management device, the encrypted shared key information obtained by updating the shared information, transmitting the shared key within the group using the updated encryption information, to the management device The information is updated.
- a key sharing method means a key sharing method in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals.
- the first communication terminal of the communication terminals stores the intra-group shared key in the storage means, and the first communication terminal of the second communication terminal of the communication terminals.
- a step of generating individual terminal individual information a step in which the first communication terminal stores the terminal individual information in a storage unit, and a step in which the first communication terminal uses the terminal individual information, Generating individual terminal key information for each of the second communication terminals, the first communication terminal transmitting the terminal key information to the second communication terminal, and the first Through
- a terminal generating encryption information common to the second communication terminal using the terminal individual information; and the first communication terminal using the encryption information to generate the intra-group information.
- a step of encrypting a shared key; a step in which the first communication terminal transmits encrypted shared key information obtained by the encryption to the management device; and the management device includes the first communication terminal.
- the management device Receiving encrypted shared key information from the server, the management device storing the received encrypted shared key information in storage means, and the management device storing encrypted shared key information in the storage means Transmitting key information to the second communication terminal, receiving the terminal key information from the first communication terminal, and receiving the key information for the terminal from the first communication terminal; Encrypted shared key information from the device Receiving the second communication terminal using the received terminal key information and the received encrypted shared key information to restore the intra-group shared key; Updating the information for encryption using terminal-specific information of only the second communication terminal remaining in the group when the second communication terminal that leaves the group occurs in the communication terminal; The first communication terminal transmitting encrypted shared key information obtained by encrypting the intra-group shared key using the updated encryption information to the management device; and Updating encrypted shared key information stored in the storage means with encrypted shared key information received from one communication terminal.
- a computer program means the communication terminal in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals
- a computer program for performing a key sharing process of the first communication terminal the step of storing the intra-group shared key in a storage means, and each of the second communication terminals of the communication terminals individually Generating individual terminal information; storing the individual terminal information in a storage; and generating individual terminal key information for each of the second communication terminals using the individual terminal information;
- the terminal key information is transmitted to the second communication terminal, and the terminal individual information is used for encryption common to the second communication terminal.
- Generating information encrypting the intra-group shared key using the encryption information, transmitting encrypted shared key information obtained by the encryption to the management device, Updating the encryption information using terminal-specific information of only the second communication terminal remaining in the group when the second communication terminal leaving the group occurs, and the updated Transmitting encrypted shared key information obtained by encrypting the intra-group shared key using encryption information to the management device, and updating the encrypted shared key information stored in the management device;
- a computer program for execution As a result, the above-described communication terminal (first communication terminal) can be realized using a computer.
- a key sharing system includes: a communication terminal belonging to the same group; and a key sharing system having a management device that holds information for sharing an intra-group shared key between the communication terminals.
- a third communication terminal generates first and second shared keys from the intra-group shared key, supplies the first shared key to the management device, and sends the second shared key to the management device.
- Distributed key supply means for supplying to a first communication terminal of the communication terminals, wherein the first communication terminal of the communication terminals includes the distributed key storage means for storing the second distributed key; Using terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals, terminal individual information storage means for storing the terminal individual information, and the terminal individual information, That of the second communication terminal Using the terminal key information generating means for generating individual terminal key information, the terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information, Encryption information generating means for generating encryption information common to the second communication terminal; encryption means for encrypting the second distributed key using the encryption information; and Encryption distributed key information transmitting means for transmitting the encrypted distributed key information obtained by the encryption to the management device, and the management device receives the encrypted distributed key information from the first communication terminal Encrypted distributed key information receiving means, encrypted distributed key information storage means for storing the received encrypted distributed key information, distributed key storage means for
- the encryption information is updated using terminal-specific information of only the second communication terminal remaining in the group, and the second distributed key is encrypted using the updated encryption information.
- the encrypted distributed key information is transmitted to the management device, and the encrypted distributed key information stored in the management device is updated.
- the distributed key supply means generates first and second shared keys from the intra-group shared key by a secret sharing method.
- the distributed key supply means generates first and second distributed keys from the intra-group shared key by exclusive OR.
- a communication terminal means the communication terminal in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals ( 1st communication terminal) and generates individual terminal individual information for each of the distributed key storage means for storing the second shared key of the intra-group shared key and the second communication terminal of the communication terminals
- Terminal individual information generating means for performing terminal individual information storage means for storing the terminal individual information, and terminal information for generating individual terminal key information for each of the second communication terminals using the terminal individual information Encryption information common to the second communication terminal using the key information generating means, the terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information Generate An encryption information generating means; an encryption means for encrypting the second distributed key using the encryption information; and transmitting the encrypted distributed key information obtained by the encryption to the management apparatus.
- Encryption that updates encryption information transmits encrypted distributed key information obtained by encrypting the second distributed key using the updated encryption information to the management device, and stores the encryption information stored in the management device The distributed distribution key information is updated.
- a key sharing method means a key sharing method in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals.
- the third communication terminal of the communication terminals generates first and second distributed keys from the intra-group shared key, and the third communication terminal includes the first distributed key.
- the first communication terminal of the communication terminals includes the intra-group shared key Storing the second distributed key in the storage means, generating the individual terminal individual information for each of the second communication terminals of the communication terminals, and 1 communication terminal is the terminal Storing the different information in the storage means, the first communication terminal using the terminal individual information to generate individual terminal key information for each of the second communication terminals, and the first One communication terminal transmits the terminal key information to the second communication terminal, and the first communication terminal uses the terminal individual information to encrypt the second communication terminal.
- the first communication terminal encrypting the second distributed key using the encryption information
- the first communication terminal encrypting the encryption
- the management device Transmitting to the second communication terminal, the management device transmitting the first distributed key stored in the storage means to the second communication terminal, and the second communication terminal Receiving terminal key information from one communication terminal, receiving the encrypted distributed key information from the management apparatus, and receiving the encrypted communication key information from the management apparatus; Receiving the first distributed key; and the second communication terminal restores the second distributed key using the received terminal key information and the received encrypted distributed key information.
- Step and the second communication terminal Combining the received first distributed key and the restored second distributed key to restore the intra-group shared key; and the first communication terminal leaving the group
- the step of updating the information for encryption using the terminal individual information of only the second communication terminal remaining in the group and the first communication terminal Transmitting encrypted distributed key information obtained by encrypting the second distributed key using the encrypted encryption information to the management apparatus; and the encryption received by the management apparatus from the first communication terminal. Updating the encrypted distributed key information stored in the storage means with the distributed key information.
- a computer program means the communication terminal in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals (
- a computer program for performing a key sharing process of the first communication terminal), storing a second distributed key of the intra-group shared key in a storage unit, and a second communication of the communication terminals A step of generating individual terminal individual information for each of the terminals, a step of storing the terminal individual information in a storage means, and an individual terminal key for each of the second communication terminals using the terminal individual information.
- the second communication terminal A step of generating general encryption information, a step of encrypting the second distributed key using the encryption information, and an encryption distributed key information obtained by the encryption. And the step of updating the information for encryption using terminal individual information of only the second communication terminal remaining in the group when the second communication terminal leaving the group occurs. And transmitting the encrypted distributed key information obtained by encrypting the second distributed key using the updated encryption information to the management device, and updating the encrypted distributed key information stored in the management device. And a step of causing the computer to execute the step.
- the above-described communication terminal (first communication terminal) can be realized using a computer.
- a key sharing system means a key sharing system having a communication terminal belonging to the same group and a management device, wherein the first communication terminal of the communication terminals is the second of the communication terminals.
- Terminal individual information generating means for generating individual terminal individual information for each of the communication terminals, terminal individual information storage means for storing the terminal individual information, and using the terminal individual information, the second communication terminal Using terminal key information generating means for generating individual terminal key information, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information,
- An encryption information generation unit that generates encryption information common to the second communication terminal; and an encryption information transmission unit that transmits the encryption information to the management device.
- the device An encryption information receiving means for receiving the encryption information from the communication terminal, an encryption means for encrypting an intra-group shared key of the group using the encryption information, and obtained by the encryption.
- Encrypted shared key information storage means for storing the encrypted shared key information, and encrypted shared key information transmission means for transmitting the encrypted shared key information to the second communication terminal
- the communication terminal of 2 includes terminal key information receiving means for receiving terminal key information from the first communication terminal, encrypted shared key information receiving means for receiving encrypted shared key information from the management apparatus, Decrypting means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information, wherein the first communication terminal leaves the group The second communication terminal to occur
- the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption information is transmitted to the management device.
- the management device includes an intra-group shared key generation unit that generates an intra-group shared key of the group.
- a communication terminal is the communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and a key encryption device, and the first of the communication terminals.
- Terminal individual information generating means for generating individual terminal individual information for each of the two communication terminals, terminal individual information storage means for storing the terminal individual information, and the second communication terminal using the terminal individual information.
- a terminal key information generating unit that generates individual terminal key information, a terminal key information transmitting unit that transmits the terminal key information to the second communication terminal, and the terminal individual information.
- An encryption information generation means for generating encryption information common to the second communication terminal, and an encryption information transmission means for transmitting the encryption information to the key encryption device.
- the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption information is It transmits to a key encryption apparatus, It is characterized by the above-mentioned.
- a management apparatus is the management apparatus in a key sharing system including a communication terminal belonging to the same group and a management apparatus, and the encryption information is transmitted from the first communication terminal of the communication terminals.
- the management apparatus includes an intra-group shared key generation unit that generates an intra-group shared key of the group.
- a key sharing system means a key sharing system having a communication terminal belonging to the same group and a management device, wherein the management device generates an intra-group shared key for the group. And an intra-group shared key transmitting means for transmitting the intra-group shared key to a first communication terminal of the communication terminals, wherein the first communication terminal is shared by the management device from the management device
- An intra-group shared key receiving means for receiving a key; a terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals; and an individual terminal for storing the terminal individual information Information storage means, terminal key information generation means for generating individual terminal key information for each of the second communication terminals using the terminal individual information, and the terminal key information Terminal key information transmitting means for transmitting to the second communication terminal; encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information; and Encryption means for encrypting the intra-group shared key using encryption information, encrypted shared key information storage means for storing the encrypted shared key information
- the encrypted shared key information receiving means for receiving the encrypted shared key information from the first communication terminal, the received terminal key information and the received encrypted shared key information Decrypting means for restoring the intra-group shared key; And the first communication terminal uses the terminal individual information of only the second communication terminal remaining in the group for encryption when the second communication terminal leaving the group occurs. It is characterized by updating information.
- a communication terminal is the communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and an intra-group shared key transmitting apparatus, and the intra-group shared key
- An intra-group shared key receiving means for receiving an intra-group shared key of the group from a transmission device; an individual terminal information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals; Terminal individual information storage means for storing the terminal individual information, terminal key information generation means for generating individual terminal key information for each of the second communication terminals using the terminal individual information, and the terminal Encryption for generating encryption information common to the second communication terminal by using terminal key information transmitting means for transmitting key information to the second communication terminal and the terminal individual information Information generating means, encryption means for encrypting the intra-group shared key using the encryption information, and encrypted shared key information storage means for storing the encrypted shared key information obtained by the encryption And encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal, wherein the first communication terminal leaves the
- a management apparatus is a management apparatus in a key sharing system having a communication terminal belonging to the same group and a management apparatus, and generates an intra-group shared key generation means for generating an intra-group shared key And an intra-group shared key transmitting means for transmitting the intra-group shared key to a first communication terminal of the communication terminals.
- a key sharing system including a first communication terminal and a second communication terminal belonging to the same group, and a third communication terminal
- the first communication terminal includes: Terminal individual information generation means for generating individual terminal individual information for each of the second communication terminals, terminal individual information storage means for storing the terminal individual information, and the second communication using the terminal individual information
- Terminal key information generating means for generating individual terminal key information for each terminal
- terminal key information transmitting means for transmitting the terminal key information to the second communication terminal
- the terminal individual information An encryption information generation means for generating encryption information common to the second communication terminal, and an encryption information transmission means for transmitting the encryption information to the third communication terminal.
- the third communication end Includes an encryption information receiving means for receiving the encryption information from the first communication terminal, an encryption means for encrypting an intra-group shared key of the group using the encryption information, Encrypted shared key information storage means for storing the encrypted shared key information obtained by the encryption, and encrypted shared key information transmission means for transmitting the encrypted shared key information to the second communication terminal,
- the second communication terminal includes terminal key information receiving means for receiving terminal key information from the first communication terminal; and encryption for receiving encrypted shared key information from the third communication terminal.
- Shared key information receiving means and decryption means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information, the first key A communication terminal that leaves the group;
- the encryption information is updated using terminal individual information of only the second communication terminal remaining in the group, and the updated encryption information is updated to the third communication terminal. It is characterized by transmitting to.
- a communication terminal means a first communication terminal and a second communication terminal belonging to the same group, a third communication terminal, and an encryption for supplying encrypted shared key information to the second communication terminal.
- the encryption information receiving means which is the third communication terminal and receives the encryption information from the first communication terminal, and the encryption information Encryption means for encrypting an intra-group shared key of the group, encrypted shared key information storage means for storing encrypted shared key information obtained by the encryption, and the encrypted shared key information Is transmitted to the encrypted shared key information receiving device.
- a key sharing system including a first communication terminal and a second communication terminal belonging to the same group, and a third communication terminal
- the third communication terminal includes: An intra-group shared key generating means for generating an intra-group shared key of the group; and an intra-group shared key transmitting means for transmitting the intra-group shared key to the first communication terminal, wherein the first communication terminal A group shared key receiving means for receiving the group shared key from the third communication terminal, a terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals, Terminal individual information storage means for storing terminal individual information, terminal key information generation means for generating individual terminal key information for each of the second communication terminals using the terminal individual information, and the terminal Encryption information generation for generating encryption information common to the second communication terminal by using terminal key information transmission means for transmitting key information to the second communication terminal and the terminal individual information Means, encryption means for encrypting the intra-group shared key using the encryption information, encrypted shared key information storage means for storing encrypted shared key
- Terminal key information receiving means encrypted shared key information receiving means for receiving encrypted shared key information from the first communication terminal, received terminal key information and the received encrypted shared key Decryption using the information to restore the intra-group shared key And the first communication terminal uses terminal-specific information of only the second communication terminal remaining in the group when the second communication terminal leaving the group occurs. And updating the encryption information.
- a communication terminal is the third communication terminal in a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, and a third communication terminal, An intra-group shared key generation unit that generates an intra-group shared key for the group, and an intra-group shared key transmission unit that transmits the intra-group shared key to the first communication terminal.
- a key sharing system including a first communication terminal and a second communication terminal belonging to the same group, a third communication terminal, and a management device.
- the terminal uses the terminal individual information using the terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals, the terminal individual information storage means for storing the terminal individual information, and the terminal individual information.
- Terminal key information generating means for generating individual terminal key information for each of the second communication terminals, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal Encryption information generating means for generating encryption information common to the second communication terminal using the individual information, and encryption information transmission for transmitting the encryption information to the third communication terminal Means
- a communication terminal for encrypting an intra-group shared key of the group using the encryption information receiving means for receiving the encryption information from the first communication terminal and the encryption information; Encrypting shared key information storing means for storing encrypted shared key information obtained by the encryption, encrypted shared key information transmitting means for transmitting the encrypted shared key information to the management device,
- the management apparatus includes: an encrypted shared key information receiving unit that receives the encrypted shared key information from the third communication terminal; and an encrypted shared key information storage unit that stores the encrypted shared key information.
- And encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal, wherein the second communication terminal receives terminal key information from the first communication terminal.
- Receiving terminal key information receiving means, and the tube An encryption shared key information receiving unit that receives encrypted shared key information from a device, and a decryption that restores the intra-group shared key using the received terminal key information and the received encrypted shared key information And when the second communication terminal that leaves the group occurs, the first communication terminal receives terminal individual information of only the second communication terminal remaining in the group. And updating the encryption information, and transmitting the updated encryption information to the third communication terminal.
- a management apparatus is the management apparatus in a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, a third communication terminal, and a management apparatus, Encrypted shared key information receiving means for receiving encrypted shared key information from the third communication terminal; encrypted shared key information storage means for storing the encrypted shared key information; and Encrypted shared key information transmitting means for transmitting to the second communication terminal.
- a key sharing system means a key sharing system having a communication terminal belonging to the same group and a management device, wherein the first communication terminal of the communication terminals is the second of the communication terminals.
- Terminal individual information generating means for generating individual terminal individual information for each of the communication terminals, terminal individual information storage means for storing the terminal individual information, and using the terminal individual information, the second communication terminal Using terminal key information generating means for generating individual terminal key information, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information,
- An encryption information generation unit that generates encryption information common to the second communication terminal; and an encryption information transmission unit that transmits the encryption information to the management device.
- the device An encryption information receiving means for receiving the encryption information from the communication terminal, and the second distributed key of the first and second distributed keys generated from the intra-group shared key of the group, Encryption means for encrypting using the encryption information, encryption distributed key information storage means for storing the encrypted distributed key information obtained by the encryption, and the encrypted distributed key information for the second Encrypted distributed key information transmitting means for transmitting to the communication terminal, and first distributed key transmitting means for transmitting the first distributed key to the second communication terminal, the second communication terminal Includes: terminal key information receiving means for receiving terminal key information from the first communication terminal; encrypted distributed key information receiving means for receiving encrypted distributed key information from the management apparatus; and A distributed key receiving means for receiving one distributed key; Using the terminal key information and the received encrypted shared key information, decryption means for restoring the second shared key, the received first shared key and the restored second key Distributed key combining means for combining the distributed keys to restore the intra-group shared key, and when the first communication terminal occurs when the second communication terminal leaving the group occurs, The encryption information is updated using
- a management apparatus is the management apparatus in a key sharing system including a communication terminal belonging to the same group and a management apparatus, and the encryption information is transmitted from the first communication terminal of the communication terminals. And encrypting the second distributed key of the first and second distributed keys generated from the intra-group shared key of the group using the encryption information.
- the management apparatus includes an intra-group shared key generation unit that generates an intra-group shared key of the group, and a distributed key generation unit that generates first and second distributed keys from the intra-group shared key. It is characterized by.
- a key sharing system means a key sharing system having a communication terminal belonging to the same group and a management device, wherein the management device generates an intra-group shared key for the group.
- Distributed key generation means for generating first and second distributed keys from the intra-group shared key, and distributed for transmitting the first and second distributed keys to the first communication terminal of the communication terminals
- a first key transmitting means wherein the first communication terminal receives the first and second distributed keys from the management device, and a second communication terminal of the communication terminals.
- a terminal individual information generating unit that generates individual terminal individual information, a terminal individual information storage unit that stores the terminal individual information, and the terminal individual information, respectively.
- Terminal key information generating means for generating key information, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the second communication using the terminal individual information.
- Encryption information generating means for generating encryption information common to the terminal, encryption means for encrypting the second distributed key using the encryption information, and encryption obtained by the encryption Encrypted distributed key information storing means for storing encrypted distributed key information, encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal, and the first distributed key as the first distributed key.
- First distributed key transmitting means for transmitting to the second communication terminal, wherein the second communication terminal receives terminal key information from the first communication terminal; Encrypted distributed key information for receiving encrypted distributed key information from the first communication terminal.
- the first communication terminal uses the terminal individual information of only the second communication terminal remaining in the group for encryption when the second communication terminal leaving the group occurs. It is characterized by updating information.
- a communication terminal is the communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and a distributed key transmission device, and an intra-group shared key of the group Generating individual terminal individual information for each of the distributed key receiving means for receiving the first and second distributed keys generated from the distributed key transmitting apparatus and the second communication terminal of the communication terminals.
- Encryption information generating means Encryption information generating means, encryption means for encrypting the second distributed key using the encryption information, and encrypted distributed key for storing encrypted distributed key information obtained by the encryption Information storage means, encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal, and first distributed information for transmitting the first distributed key to the second communication terminal
- the encryption information is obtained using the terminal individual information of only the second communication terminal remaining in the group. It is characterized by updating.
- a management apparatus is the management apparatus in a key sharing system having a communication terminal belonging to the same group and a management apparatus, and generates an intra-group shared key generation means for generating an intra-group shared key of the group Distributed key generation means for generating first and second distributed keys from the intra-group shared key, and distributed for transmitting the first and second distributed keys to the first communication terminal of the communication terminals And a key transmission means.
- a key sharing system including a first communication terminal and a second communication terminal belonging to the same group, and a third communication terminal
- the first communication terminal includes: Terminal individual information generation means for generating individual terminal individual information for each of the second communication terminals, terminal individual information storage means for storing the terminal individual information, and the second communication using the terminal individual information
- Terminal key information generating means for generating individual terminal key information for each terminal
- terminal key information transmitting means for transmitting the terminal key information to the second communication terminal
- the terminal individual information An encryption information generation means for generating encryption information common to the second communication terminal, and an encryption information transmission means for transmitting the encryption information to the third communication terminal.
- an encryption information receiving means for receiving the encryption information; an encryption means for encrypting the second distributed key using the encryption information; and an encrypted distributed key obtained by the encryption.
- Encrypted distributed key information storage means for storing information; encrypted distributed key information transmission means for transmitting the encrypted distributed key information to the second communication terminal; and the first distributed key for the second communication.
- First distributed key transmitting means for transmitting to the terminal, wherein the second communication terminal receives terminal key information from the first communication terminal, and the third key information receiving means Encryption distribution that receives encryption distribution key information from other communication terminals Using the information receiving means, the distributed key receiving means for receiving the first distributed key from the third communication terminal, the received terminal key information and the received encrypted distributed key information; Decrypting means for restoring the two distributed keys; and a distributed key combining means for restoring the intra-group shared key by combining the received first distributed key and the restored second distributed key; And the first communication terminal encrypts using the terminal individual information of only the second communication terminal remaining in the group when the second communication terminal leaving the group occurs. And updating the encryption information and transmitting the updated encryption information to the third communication terminal.
- a communication terminal means a first communication terminal and a second communication terminal belonging to the same group, a third communication terminal, and a distribution for supplying a first distributed key to the second communication terminal
- the third communication terminal is an intra-group sharing of the group
- An intra-group shared key generating means for generating a key, a distributed key generating means for generating first and second distributed keys from the intra-group shared key, and an encryption for receiving encryption information from the first communication terminal
- a key sharing system including a first communication terminal and a second communication terminal belonging to the same group, and a third communication terminal
- the third communication terminal includes: An intra-group shared key generating means for generating an intra-group shared key of the group; a distributed key generating means for generating first and second distributed keys from the intra-group shared key; and the first and second distributed keys.
- Distributed key transmitting means for transmitting to the first communication terminal, wherein the first communication terminal receives the first and second distributed keys from the third communication terminal.
- a terminal individual information generating unit that generates individual terminal individual information for each of the second communication terminals, a terminal individual information storage unit that stores the terminal individual information, and the terminal individual information.
- Each of the two communication terminals Using the terminal key information generating means for generating individual terminal key information, the terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information.
- Encryption information generating means for generating encryption information common to the two communication terminals, encryption means for encrypting the second distributed key using the encryption information, and obtained by the encryption Encrypted distributed key information storing means for storing the encrypted distributed key information, encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal, and the first distributed key
- a first distributed key transmitting means for transmitting to the second communication terminal, wherein the second communication terminal receives terminal key information from the first communication terminal.
- the distributed key receiving means for receiving the first distributed key from the first communication terminal, the received terminal key information and the received encrypted distributed key information, Decrypting means for restoring the second distributed key, and distributed key combining means for restoring the intra-group shared key by combining the received first distributed key and the restored second distributed key
- the first communication terminal uses terminal-specific information of only the second communication terminal remaining in the group. The encryption information is updated.
- a communication terminal is the third communication terminal in a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, and a third communication terminal,
- An intra-group shared key generating means for generating an intra-group shared key of the group;
- a distributed key generating means for generating first and second distributed keys from the intra-group shared key; and the first and second distributed keys.
- Distributed key transmission means for transmitting to the first communication terminal.
- a key sharing system including a first communication terminal and a second communication terminal belonging to the same group, a third communication terminal, and a management device.
- the terminal uses the terminal individual information using the terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals, the terminal individual information storage means for storing the terminal individual information, and the terminal individual information.
- Terminal key information generating means for generating individual terminal key information for each of the second communication terminals, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal Encryption information generating means for generating encryption information common to the second communication terminal using the individual information, and encryption information transmission for transmitting the encryption information to the third communication terminal Means
- the communication terminal of 3 includes an intra-group shared key generating unit that generates an intra-group shared key of the group, a distributed key generating unit that generates first and second distributed keys from the intra-group shared key, and the first Information receiving means for receiving the encryption information from the communication terminal, encryption means for encrypting the second distributed key using the encryption information, and obtained by the encryption Encrypted distributed key information storage means for storing encrypted distributed key information, encrypted distributed key information transmission means for transmitting the encrypted distributed key information to the management apparatus, and the first distributed key to the management apparatus First distributed key transmitting means for transmitting, wherein the management device receives encrypted distributed key information from the third communication terminal, and receives the encrypted distributed key
- a distributed key combining means for restoring the intra-group shared key,
- the first communication terminal updates the information for encryption using the terminal individual information of only the second communication terminal remaining in the group Then, the updated encryption information is transmitted to the third communication terminal.
- a management apparatus is the management apparatus in a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, a third communication terminal, and a management apparatus, Encrypted distributed key information receiving means for receiving encrypted distributed key information from the third communication terminal, and the first of the first and second distributed keys generated from the intra-group shared key of the group Distributed key receiving means for receiving a distributed key from the third communication terminal, encrypted distributed key information storage means for storing the encrypted distributed key information, and the encrypted distributed key information for the second communication terminal Encrypted distributed key information transmitting means for transmitting to the second communication terminal, and distributed key transmitting means for transmitting the first distributed key to the second communication terminal.
- the amount of encryption key information stored in the management apparatus is reduced, and when a terminal that leaves the key sharing group occurs, the key information held by the terminal remaining in the key sharing group is not updated. However, it is possible to invalidate the key information of the terminal that leaves the key sharing group.
- FIG. 3 is a sequence chart illustrating a processing procedure in a communication terminal proxy registration stage according to the first embodiment.
- 6 is a sequence chart illustrating a processing procedure in a user usage registration stage according to the first embodiment.
- 3 is a sequence chart illustrating a processing procedure in a communication terminal addition stage according to the first embodiment.
- 6 is a sequence chart illustrating a processing procedure in a shared key restoration stage according to the first embodiment.
- 3 is a sequence chart illustrating a processing procedure of a communication terminal leaving stage according to the first embodiment.
- 6 is a sequence chart illustrating a processing procedure of a user leaving stage according to the first embodiment.
- FIG. 10 is a sequence chart showing a processing procedure in a user use registration stage according to Embodiment 2.
- 10 is a sequence chart illustrating a processing procedure in a communication terminal addition stage according to the second embodiment.
- 10 is a sequence chart illustrating a processing procedure in a shared key restoration stage according to the second embodiment.
- 10 is a sequence chart showing a processing procedure of a communication terminal leaving stage according to Embodiment 2.
- 10 is a sequence chart showing a processing procedure of a user leaving stage according to Embodiment 2.
- 10 is a sequence chart illustrating a processing procedure in a shared key update stage according to the second embodiment.
- FIG. 10 is a conceptual diagram according to Embodiment 4.
- FIG. 4 is a conceptual diagram according to Embodiment 4.
- 10 is a configuration diagram of an apparatus according to a fourth embodiment. 10 is a sequence chart of a preparation stage according to Embodiment 4. 10 is a sequence chart of a user usage registration stage according to Embodiment 4. 10 is a sequence chart of a device addition stage according to Embodiment 4. 10 is a sequence chart of a device detachment stage according to Embodiment 4. 10 is a sequence chart of a user departure stage according to Embodiment 4. 10 is a conceptual diagram according to Embodiment 5.
- FIG. FIG. 10 is a configuration diagram of an apparatus according to a fifth embodiment. 10 is a sequence chart of a preparation stage according to Embodiment 5. 10 is a sequence chart of a user usage registration stage according to Embodiment 5.
- 10 is a sequence chart of a device addition stage according to Embodiment 5.
- 10 is a sequence chart of a device detachment stage according to Embodiment 5.
- 10 is a sequence chart of a user departure stage according to Embodiment 5.
- FIG. 10 is a conceptual diagram according to Embodiment 6.
- FIG. 10 is a sequence chart of a user departure stage according to Embodiment 6.
- 10 is a conceptual diagram according to Embodiment 7.
- FIG. 10 is an apparatus configuration diagram according to Embodiment 7.
- 18 is a sequence chart of a user usage registration stage according to Embodiment 7.
- 18 is a sequence chart of a device addition stage according to Embodiment 7.
- 18 is a sequence chart of a shared key restoration stage according to Embodiment 7.
- 12 is a sequence chart of a device separation stage according to Embodiment 7.
- 10 is a sequence chart of a user departure stage according to Embodiment 7.
- FIG. 10 is a conceptual diagram according to Example 8.
- FIG. 10 is a diagram illustrating an apparatus configuration according to an eighth embodiment.
- FIG. 10 is an apparatus configuration diagram according to Embodiment 9.
- 10 is a sequence chart of a user usage registration stage according to Embodiment 9.
- 10 is a sequence chart of a device addition stage according to Embodiment 9. It is a sequence chart of the device detachment
- FIG. 10 is a sequence chart of a user departure stage according to Embodiment 9.
- FIG. 10 is a sequence chart of a user departure stage according to Embodiment 9.
- FIG. 12 is a conceptual diagram according to Example 10.
- FIG. 10 is an apparatus configuration diagram according to Embodiment 10.
- 12 is a sequence chart of a preparation stage according to Embodiment 10. It is a sequence chart of the user use registration stage which concerns on Example 10.
- FIG. 18 is a sequence chart of a device addition stage according to Embodiment 10. It is a sequence chart of the device detachment
- FIG. It is a sequence chart of the user leaving stage which concerns on Example 10.
- FIG. 12 is a conceptual diagram according to Example 11.
- FIG. 15 is a diagram illustrating a device configuration according to Example 11.
- 22 is a sequence chart of a preparation stage according to Embodiment 11.
- 18 is a sequence chart of a user usage registration stage according to Embodiment 11.
- FIG. 22 is a sequence chart of a device addition stage according to Embodiment 11.
- 22 is a sequence chart of a device separation stage according to Embodiment 11.
- 18 is a sequence chart of a user departure stage according to Embodiment 11.
- FIG. 20 is a conceptual diagram according to Embodiment 12.
- FIG. 15 is an apparatus configuration diagram according to Embodiment 12. It is a sequence chart of the user use registration stage which concerns on Example 12.
- FIG. 22 is a sequence chart of a device addition stage according to Embodiment 12.
- FIG. 21 is a sequence chart of a shared key restoration stage according to Embodiment 12.
- FIG. 22 is a sequence chart of a device detachment stage according to Embodiment 12. It is a sequence chart of the user leaving stage which concerns on Example 12.
- FIG. 16 is a diagram illustrating a device configuration according to Embodiment 13. It is a sequence chart of the user use registration stage concerning Example 13.
- 18 is a sequence chart of a device addition stage according to Embodiment 13. It is a sequence chart of the shared key restoration step concerning Example 13. It is a sequence chart of the device detachment
- FIG. FIG. 20 is a conceptual diagram according to Example 14;
- FIG. 17 is a diagram illustrating a device configuration according to Embodiment 14; It is a sequence chart of the user use registration stage concerning Example 14.
- 18 is a sequence chart of a device addition stage according to Embodiment 14.
- FIG. 17 is a conceptual diagram according to Embodiment 15.
- FIG. 17 is a diagram of a device configuration according to Embodiment 15.
- FIG. 38 is a sequence chart of a user usage registration stage according to Embodiment 15.
- FIG. 18 is a sequence chart of a device addition stage according to Embodiment 15.
- 22 is a sequence chart of a device removal stage according to Embodiment 15. It is a sequence chart of the user leaving stage which concerns on Example 15.
- FIG. 1 is a conceptual diagram showing a configuration of a key sharing system 1 according to an embodiment.
- the key sharing system 1 includes a management device (PNSP) 11, an unregistered communication terminal (nTE) 13, and a registered communication terminal (TE) 14.
- the registered communication terminal 14 communicates with an operator authentication infrastructure (IMS: IP Multimedia Subsystem) 12 via the access network 1.
- IMS IP Multimedia Subsystem
- the confidentiality of communication between the registered communication terminal 14 and the operator authentication infrastructure 12 data cannot be intercepted by a third party
- integrity data cannot be altered in the middle
- the management apparatus 11 communicates with the provider authentication infrastructure 12, the confidentiality and integrity of this communication are guaranteed.
- the registered communication terminal 14 communicates with the management apparatus 11 via the provider authentication infrastructure 12, but the confidentiality and integrity of this communication are guaranteed.
- the unregistered communication terminal 13 is connected to the Internet via the access networks 2 and 3 and communicates with the management apparatus 11 via the Internet, but the confidentiality and integrity of this communication are not guaranteed.
- the registered communication terminal 14 and the unregistered communication terminal 13 belong to a service group (PN), and can share a common service using the intra-group shared key by sharing the intra-group shared key.
- PN service group
- embodiments for sharing an intra-group shared key in the key sharing system 1 shown in FIG. 1 will be sequentially described.
- FIG. 2 is a first embodiment of the key sharing system 1.
- a registered communication terminal (TE a ) 14 (hereinafter, owner TE a 14) is a communication terminal of the owner (user A) of the group (PN y ).
- the registered communication terminal (TE b ) 14 (hereinafter referred to as user TE b 14) is a communication terminal of user B participating in the group (PN y ).
- the unregistered communication terminal (nTE) 13 (hereinafter, nTE13) is a communication terminal of a user who joins or leaves the group (PN y ).
- nTE 13 is a communication terminal of a user who joins or leaves the group (PN y ).
- the owner TE a 14 generates an intra-group shared key (hereinafter, intra-PN shared key) (KPN y ) and supplies it to the user TE b 14.
- the user TE b 14 stores the intra-PN shared key (KPN y ) in the intra-group shared key storage unit such as a memory.
- the user TE b 14 generates individual terminal individual information for each of the users nTE 1 13, nTE 2 13, and nTE 3 13 participating in the group (PN y ).
- the user TE b 14 stores the terminal individual information of each nTE 1 13, nTE 2 13, and nTE 3 13 in a terminal individual information storage unit such as a memory.
- User TE b 14 using the terminal individual information stored in the terminal individual information storage unit, nTE 1 13, nTE 2 13 , nTE 3 13 key information for individual terminals to each of the (k b, 1, k b, 2 , kb , 3 ).
- the user TE b 14 transmits the terminal key information (k b, 1 ) to the nTE 1 13, transmits the terminal key information (k b, 2 ) to the nTE 2 13, and transmits the terminal key information (k b, 1 ). 3 ) is sent to nTE 3 13.
- the user TE b 14 generates encryption information ( ⁇ b, y ) common to the nTE 1 13, nTE 2 13, and nTE 3 13 using the terminal individual information stored in the terminal individual information storage unit. .
- the user TE b 14 encrypts the intra-PN shared key (KPN y ) stored in the intra-group shared key storage unit using the encryption information ( ⁇ b, y ).
- the user TE b 14 transmits the encrypted shared key information (C b, y ) obtained by the encryption to the management apparatus 11 (hereinafter referred to as PNSP 11).
- the PNSP 11 receives the encrypted shared key information (C b, y ) from the user TE b 14.
- the PNSP 11 stores the received encrypted shared key information (C b, y ) in an encrypted shared key information storage unit such as a memory.
- the PNSP 11 sends the encrypted shared key information (C b, y ) stored in the encrypted shared key information storage unit to the nTE 1 13, nTE 2 13 and transmit to nTE 3 13.
- the nTE 1 13 receives the terminal key information (k b, 1 ) from the user TE b 14.
- the nTE 1 13 requests the encrypted shared key information (C b, y ) from the PNSP 11 and receives the encrypted shared key information (C b, y ).
- nTE 1 13 restores the intra-PN shared key (KPN y ) using the received terminal key information (k b, 1 ) and the received encrypted shared key information (C b, y ). . Since the processes of nTE 1 13, nTE 2 13, and nTE 3 13 are common, the description of the processes of nTE 2 13, nTE 3 13 is omitted.
- nTE 1 13, nTE 2 13, and nTE 3 13 leaves the group (PN y ).
- nTE 1 13 is assumed to leave.
- the user TE b 14 updates the encryption information using the terminal individual information of only the nTE 2 13 and nTE 3 13 remaining in the group (PN y ).
- the user TE b 14 encrypts the intra-PN shared key (KPN y ) using the updated encryption information.
- the user TE b 14 transmits the encrypted shared key information obtained by the encryption to the PNSP 11, and updates the encrypted shared key information stored in the PNSP 11.
- the intra-PN shared key (KPN y ) Cannot be restored. Therefore, nTE 1 to leave the group without updating the nTE 2 13 remaining (PN y), nTE 3 13 terminal key information (k b, 2, k b , 3), Group (PN y)
- the 13 terminal key information (kb , 1 ) can be invalidated. Further, since the encrypted shared key information stored in the PNSP 11 is common to the group (PN y ), the amount of information stored in the PNSP 11 can be reduced.
- Example 1 is demonstrated in detail for every step. Note that communication among the owner TE a 14, the user TE b 14, and the PNSP 11 is performed via the operator authentication infrastructure (IMS) 12.
- IMS operator authentication infrastructure
- the owner TE a 14 generates an intra-PN shared key (KPN y ) of the group (PN y ) and stores it in the memory.
- the user TE b 14 generates the following values (1) to (7) and stores them in the memory. These values (1) to (7) are common to all groups (PN).
- the subscript denoted been had in parentheses as a x (i) raised to the power x i of a (i.e., multiplication x i of a x (i) a) .
- FIG. 3 is a sequence chart illustrating a processing procedure in a communication terminal proxy registration stage according to the first embodiment.
- the communication terminal proxy registration stage will be described with reference to FIG.
- Step A1 User TE b 14 registers nTE z 13 with PNSP 11 (step A1). At this time, the user TE b 14 acquires the ID (IMPU nTE, b, z ) for nTE z 13 and the shared key (K nTE, b, z ) with the PNSP. ID (IMPU nTE, b, z ) and shared key (K nTE, b, z ) are described in Non-Patent Document 3.
- the ID (IMPU nTE, b, z ) and the shared key (K nTE, b, z ) for nTE z 13 are not essential, and the ID (IMPU nTE, b, z ) and the shared key (K nTE, b) , z ) need not be obtained.
- ID IMPU nTE, b, z
- shared key K nTE, b, z
- FIG. 4 is a sequence chart illustrating a processing procedure in a user usage registration stage according to the first embodiment.
- the user TE b 14 transmits a request to join the group (PN y ) to the owner TE a 14.
- the ID (IMPU TE, b ) of the user TE b 14 is transmitted to the owner TE a 14 together.
- Step B2 When the owner TE a 14 permits the participation of the user B, the owner TE a 14 transmits an intra-PN shared key (KPN y ) to the user TE b 14.
- the user TE b 14 stores the intra-PN shared key (KPN y ) in the memory.
- FIG. 5 is a sequence chart illustrating a processing procedure in a communication terminal addition stage according to the first embodiment.
- the communication terminal addition stage will be described with reference to FIG. Step C1:
- the user TE b 14 adds nTE z 13 to the group (PN y )
- the user TE b 14 encrypts using the intra-PN shared key (KPN y ) and “s ′ b, z , d, A b ”.
- Step C2 The user TE b 14 transmits the encrypted shared key information (C b, y ) to the PNSP 11.
- PNSP11 the user TE b encrypted shared key information received from the 14 (C b, y) and stored in the memory, to update the encrypted shared key information in the memory (C b, y).
- the user TE b 14 stores the encryption information ( ⁇ b, y ) in the memory.
- FIG. 6 is a sequence chart illustrating the processing procedure of the shared key restoration stage according to the first embodiment.
- the shared key restoration step will be described with reference to FIG.
- Step D1 nTE z 13 transmits a message requesting service start of the group (PN y ) to PNSP 11.
- ID IMPU nTE, b, z
- the communication between nTE z 13 and PNSP 11 can maintain confidentiality and integrity by the shared key (K nTE, b, z ).
- the terminal key information (k b, z ( ⁇ b, z , ⁇ b, z ))
- the intra-PN shared key (KPN y ) is restored by the following equation.
- the nTE z 13 can receive a service common to the group (PN y ) using the intra-PN shared key (KPN y ).
- FIG. 7 is a sequence chart illustrating the processing procedure of the communication terminal leaving stage according to the first embodiment.
- the communication terminal leaving stage will be described with reference to FIG. Step E1:
- Step E2 The user TE b 14 transmits the updated encrypted shared key information (C b, y ) to the PNSP 11.
- PNSP11 the user TE b encrypted shared key information received from the 14 (C b, y) and stored in the memory, to update the encrypted shared key information in the memory (C b, y).
- User TE b 14 stores encrypted information after updating (lambda b, y) to the memory, to update the encryption of the memory information ( ⁇ b, y).
- FIG. 8 is a sequence chart illustrating the processing procedure of the user leaving stage according to the first embodiment.
- the owner TE a 14 transmits to the PNSP 11 a message requesting deletion of the encrypted shared key information (C b, y ) related to the user TE b 14 to be removed from the group (PN y ).
- Step F2 The PNSP 11 deletes the encrypted shared key information (C b, y ) related to the user TE b 14 in response to the deletion request.
- Step F3 The PNSP 11 transmits to the owner TE a 14 a message notifying that the encrypted shared key information (C b, y ) related to the user TE b 14 has been deleted.
- FIG. 9 shows a second embodiment of the key sharing system 1.
- owner TE a 14 is a communication terminal of the owner (user A) of the group (PN y ).
- User TE b 14 is a communication terminal of user B who participates in the group (PN y ).
- the nTE 13 is a communication terminal of a user who joins or leaves the group (PN y ).
- Owner TE a 14 generates the distributed key 1 from the PN in the shared key (KPN y) (S b, y) and distributed key 2 (U b, y) by a secret sharing scheme, the distributed key 1 (S b, y ) To the PNSP 11 and the distributed key 2 (U b, y ) to the user TE b 14.
- the PNSP 11 stores the distributed key 1 (S b, y ) in a distributed key storage unit such as a memory.
- the user TE b 14 stores the distributed key 2 (U b, y ) in a distributed key storage unit such as a memory.
- the user TE b 14 generates individual terminal individual information for each of the users nTE 1 13, nTE 2 13, and nTE 3 13 participating in the group (PN y ).
- the user TE b 14 stores the terminal individual information of each nTE 1 13, nTE 2 13, and nTE 3 13 in a terminal individual information storage unit such as a memory.
- User TE b 14 using the terminal individual information stored in the terminal individual information storage unit, nTE 1 13, nTE 2 13 , nTE 3 13 key information for individual terminals to each of the (k b, 1, k b, 2 , kb , 3 ).
- the user TE b 14 transmits the terminal key information (k b, 1 ) to the nTE 1 13, transmits the terminal key information (k b, 2 ) to the nTE 2 13, and transmits the terminal key information (k b, 1 ). 3 ) is sent to nTE 3 13.
- the user TE b 14 generates encryption information ( ⁇ b, y ) common to the nTE 1 13, nTE 2 13, and nTE 3 13 using the terminal individual information stored in the terminal individual information storage unit. .
- the user TE b 14 encrypts the distributed key 2 (U b, y ) stored in the distributed key storage unit using the encryption information ( ⁇ b, y ).
- the user TE b 14 transmits the encrypted distributed key information (C b, y ) obtained by the encryption to the PNSP 11.
- the PNSP 11 receives the encrypted distributed key information (C b, y ) from the user TE b 14.
- the PNSP 11 stores the received encrypted distributed key information (C b, y ) in an encrypted distributed key information storage unit such as a memory.
- the PNSP 11 sends the encrypted distributed key information (C b, y ) stored in the encrypted distributed key information storage unit to the nTE 1 13, nTE 2 13 and transmit to nTE 3 13.
- the PNSP 11 changes the distributed key 1 (S b, y ) stored in the distributed key storage unit to nTE 1 13, nTE 2 13, nTE. 3 Send to 13.
- the nTE 1 13 receives the terminal key information (k b, 1 ) from the user TE b 14.
- the nTE 1 13 requests the encrypted distributed key information (C b, y ) from the PNSP 11 and receives the encrypted distributed key information (C b, y ).
- the nTE 1 13 restores the distributed key 2 (U b, y ) using the received terminal key information (k b, 1 ) and the received encrypted distributed key information (C b, y ). To do.
- nTE 1 13 requests a distributed key 1 (S b, y) with respect PNSP11, receives the distributed key 1 (S b, y).
- nTE 1 13 combines the received distributed key 1 (S b, y ) and the restored distributed key 2 (U b, y ) to restore the intra-PN shared key (KPN y ). Since the processes of nTE 1 13, nTE 2 13, and nTE 3 13 are common, the description of the processes of nTE 2 13, nTE 3 13 is omitted.
- nTE 1 13, nTE 2 13, and nTE 3 13 leaves the group (PN y ).
- nTE 1 13 is assumed to leave.
- the user TE b 14 updates the encryption information using the terminal individual information of only the nTE 2 13 and nTE 3 13 remaining in the group (PN y ).
- the user TE b 14 encrypts the distributed key 2 (U b, y ) using the updated encryption information.
- the user TE b 14 transmits the encrypted distributed key information obtained by the encryption to the PNSP 11, and updates the encrypted distributed key information stored in the PNSP 11.
- the distributed key 2 (U b, y ) cannot be restored. Therefore, nTE 1 to leave the group without updating the nTE 2 13 remaining (PN y), nTE 3 13 terminal key information (k b, 2, k b , 3), Group (PN y)
- the 13 terminal key information (kb , 1 ) can be invalidated. Also, since the encrypted distributed key information stored in the PNSP 11 is common to the group (PN y ), the amount of information stored in the PNSP 11 can be reduced.
- Example 2 is demonstrated in detail for every step. Note that communication among the owner TE a 14, the user TE b 14, and the PNSP 11 is performed via the operator authentication infrastructure (IMS) 12.
- IMS operator authentication infrastructure
- FIG. 10 is a sequence chart illustrating a processing procedure in a user usage registration stage according to the second embodiment.
- the user TE b 14 transmits a request to join the group (PN y ) to the owner TE a 14.
- the ID (IMPU TE, b ) of the user TE b 14 is transmitted to the owner TE a 14 together.
- Step B12 When the owner TE a 14 permits the participation of the user B, the distributed key 1 (S b, y ) and the distributed key 2 (U b, y ) are used using the intra-PN shared key (KPN y ). Calculated by the following formula.
- Step B13 The owner TE a 14 transmits the distributed key 1 (S b, y ) to the PNSP 11.
- the PNSP 11 stores the distributed key 1 (S b, y ) in the memory.
- User TE b 14 stores distributed key 2 (U b, y ) in memory.
- FIG. 11 is a sequence chart illustrating a processing procedure in a communication terminal addition stage according to the second embodiment.
- the communication terminal addition stage will be described with reference to FIG. Step C11:
- the user TE b 14 adds nTE z 13 to the group (PN y )
- the user TE b 14 encrypts using the distributed key 2 (U b, y ) and “s ′ b, z , d, A b ”.
- Step C12 The user TE b 14 transmits the encrypted distributed key information (C b, y ) to the PNSP 11.
- PNSP11 the user TE b encrypted distributed key information received from the 14 (C b, y) and stored in the memory, to update the encrypted distributed key information in the memory (C b, y).
- the user TE b 14 stores the encryption information ( ⁇ b, y ) in the memory.
- FIG. 12 is a sequence chart illustrating a processing procedure in a shared key restoration stage according to the second embodiment.
- the shared key restoration step will be described with reference to FIG. Step D11:
- the nTE z 13 transmits a message requesting the service start of the group (PN y ) to the PNSP 11.
- ID IMPU nTE, b, z
- the communication between nTE z 13 and PNSP 11 can maintain confidentiality and integrity by the shared key (K nTE, b, z ).
- the nTE z 13 can receive a service common to the group (PN y ) using the intra-PN shared key (KPN y ).
- FIG. 13 is a sequence chart illustrating a processing procedure of a communication terminal leaving stage according to the second embodiment.
- the communication terminal leaving stage will be described with reference to FIG. Step E11: user TE b 14, when nTE z 13 is detached from the group (PN y), calculates distributed key update information ( ⁇ U b, y, ⁇ S b , y) to the following equation.
- Step E12 The user TE b 14 uses the distributed key update information ( ⁇ U b, y ) to change the distributed key 2 (U b, y ) held by itself to the distributed key 2 (U ′ b, y ) as follows : Update with Furthermore, the user TE b 14 uses the distributed key 2 (U ′ b, y ), the encryption information ( ⁇ b, y ), and “s ′ b, z , d, A b ” to encrypt the information.
- Step E13 The user TE b 14 transmits the updated encrypted distributed key information (C b, y ) and distributed key update information ( ⁇ S b, y ) to the PNSP 11.
- PNSP11 the user TE b encrypted distributed key information received from the 14 (C b, y) and stored in the memory, to update the encrypted distributed key information in the memory (C b, y).
- Step E14 The PNSP 11 uses the distributed key update information ( ⁇ S b, y ) received from the user TE b 14 and uses the distributed key 1 (S b, y ) held by itself to the distributed key 1 (S ′ b, y). ) With the following formula.
- Step E15 The PNSP 11 transmits a message notifying the completion of leaving the communication terminal to the owner TE a 14. As a result, the owner TE a 14 performs a shared key update stage described later (step E16). If the same intra-PN shared key (KPN y ) is to be used continuously, the shared key update stage is not performed.
- FIG. 14 is a sequence chart illustrating the procedure of the user leaving stage according to the second embodiment.
- the owner TE a 14 requests to delete the encrypted distributed key information (C b, y ) and the distributed key 1 (S b, y ) relating to the user TE b 14 to be removed from the group (PN y ). Is transmitted to PNSP11.
- Step F12 The PNSP 11 deletes the encrypted distributed key information (C b, y ) and the distributed key 1 (S b, y ) related to the user TE b 14 in response to the deletion request.
- Step F13 The PNSP 11 transmits to the owner TE a 14 a message notifying that the encrypted distributed key information (C b, y ) and the distributed key 1 (S b, y ) related to the user TE b 14 have been deleted.
- FIG. 15 is a sequence chart illustrating a processing procedure in a shared key update stage according to the second embodiment.
- the shared key update stage will be described with reference to FIG.
- Step G11 The owner TE a 14 newly generates an intra-PN shared key (KPN y * ( ⁇ Z k )) of the group (PN y ) at random and stores it in the memory.
- Step G12 The owner TE a 14 calculates the shared key update information (S * a, y ) by the following equation.
- Step G13 The owner TE a 14 transmits shared key update information (S * a, y ) to the PNSP 11.
- Step G14 The PNSP 11 uses the shared key update information (S * a, y ) received from the owner TE a 14 to update the distributed key 1 (S b, y ) held by the PNSP 11 according to the following equation.
- the third embodiment is different from the second embodiment in the distribution method of the intra-PN shared key (KPN y ). It was dispersed PN in the shared key (KPN y) by Example 2 In a secret sharing method described above, the exclusive OR Example 3: distributing PN in the shared key (KPN y) by (XOR eXclusive OR). Only differences from the second embodiment will be described below.
- the nTE z 13 uses the encrypted distributed key information (C b, y ) received from the PNSP 11 and the terminal key information (k b, z ) stored by itself to obtain the distributed key 2 (U b, y ).
- the distributed key 1 (S b, y ) and the distributed key 2 (U b, y ) received from the PNSP 11 the intra-PN shared key (KPN y ) is recovered by the following equation.
- the user TE b 14 calculates the distributed key update information ( ⁇ U b, y , ⁇ S b, y ) according to the following equation. Further, the user TE b 14 updates the distributed key 2 (U b, y ) held by the user TE b 14 to the distributed key 2 (U ′ b, y ) by the following expression. Also, the PNSP 11 updates the distributed key 1 (S b, y ) held by itself to the distributed key 1 (S ′ b, y ) by the following expression.
- the owner TE a 14 newly generates an intra-PN shared key (KPN y * ( ⁇ Z k )) of the group (PN y ) at random, and calculates shared key update information (S * a, y ) by the following equation To do.
- the PNSP 11 uses the shared key update information (S * a, y ) received from the owner TE a 14 to update the distributed key 1 (S b, y ) held by the PNSP 11 according to the following equation.
- the PNSP 11 deletes the shared key update information (S * a, y ) without saving it.
- TE X User x's mobile phone (first communication terminal, registered communication terminal)
- TE owner Owner's mobile phone (third communication terminal, registered communication terminal)
- PN y Group y nTE z : Device z (second communication terminal, unregistered communication terminal)
- IMS Provider Authentication Platform (IP Multimedia Subsystem)
- I x, z Terminal individual information
- the intra-group shared key (encrypted shared key) is delivered from the management device (PNSP) to the second communication terminal (device, nTE z ).
- FIG. 16 is a conceptual diagram according to the fourth embodiment. As shown in FIG. 16, the intra-group shared key is encrypted by the management apparatus (PNSP), and then encrypted shared key information from the management apparatus (PNSP) to the second communication terminal (device, nTE z ). Sent. Note that the encrypted shared key information may be delivered from the management device (PNSP) to the second communication terminal (device, nTE z ) via the first communication terminal (user's mobile phone, TE x ). Good.
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key and transmits it to the management device (PNSP).
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to the management device (PNSP).
- the management apparatus encrypts the intra-group shared key using the encryption information, and transmits the encrypted shared key information to the second communication terminal (device, nTE z ).
- the second communication terminal decrypts the intra-group shared key using the encrypted shared key information and the terminal key information.
- FIG. 17 is a diagram of a device configuration according to the fourth embodiment.
- a first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key information transmission unit 104. And an encryption information generation unit 105 and an encryption information transmission unit 106.
- the management apparatus (PNSP) 11 includes an intra-group shared key storage unit 201, an encryption information receiving unit 202, an encryption unit 203, an encrypted shared key information transmission unit 204, and an encrypted shared key information storage unit 206.
- the fourth embodiment is different from the first embodiment in that the management apparatus (PNSP) generates encrypted shared key information.
- 18 to 22 are sequence charts showing the procedure of the operation according to the fourth embodiment.
- FIG. 18 is a sequence chart of a preparation stage according to the fourth embodiment.
- the third communication terminal owner's mobile phone, TE owner
- K PN, y an intra-group shared key
- PNSP management device
- the terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A3)
- the first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
- FIG. 19 is a sequence chart of the user usage registration stage according to the fourth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3). If the third communication terminal (owner's mobile phone, TE owner ) permits the participation, the third communication terminal transmits the updated intra-group shared key (K * PN, y ) to the management device (PNSP) (step C4).
- K * PN, y the management device
- FIG. 20 is a sequence chart of a device addition stage according to the fourth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2).
- the third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the updated in-group shared key (K * PN, y ) to the management device (PNSP) (step D4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step D6).
- PNSP management device
- FIG. 21 is a sequence chart of a device detachment stage according to the fourth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the updated intra-group shared key (K * PN, y ) to the management device (PNSP) (step F4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) which is separated from (PN y) than in Group second participating in (PN y)
- encryption information (K * a, y ) is generated and updated (step F5).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step F6).
- FIG. 22 is a sequence chart of the user departure stage according to the fourth embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- information on (C a, y) requests deletion of (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2).
- the third communication terminal (owner's mobile phone, TE owner ) sends the encrypted shared key information (C a, y ) regarding the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And delete the updated in-group shared key (K * PN, y ) (step G3).
- the management device deletes the encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) (step G4).
- the intra-group shared key (encrypted shared key) is delivered from the management apparatus (PNSP) to the second communication terminal (device, nTE z ).
- FIG. 23 is a conceptual diagram according to the fifth embodiment. As shown in FIG. 23, after the intra-group shared key is encrypted by the management apparatus (PNSP), it is sent as encrypted shared key information from the management apparatus (PNSP) to the second communication terminal (device, nTE z ). Sent. Note that the encrypted shared key information may be delivered from the management device (PNSP) to the second communication terminal (device, nTE z ) via the first communication terminal (user's mobile phone, TE x ). Good.
- the management apparatus generates an intra-group shared key.
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to the management device (PNSP).
- the management apparatus encrypts the intra-group shared key using the encryption information, and transmits the encrypted shared key information to the second communication terminal (device, nTE z ).
- the second communication terminal decrypts the intra-group shared key using the encrypted shared key information and the terminal key information.
- FIG. 24 is a block diagram of an apparatus according to the fifth embodiment.
- the management device (PNSP) 11 includes an intra-group shared key storage unit 201, an encryption information receiving unit 202, an encryption unit 203, an encrypted shared key information transmission unit 204, an intra-group shared key generation unit 205, An encrypted shared key information storage unit 206 is included.
- the first communication terminal (user's mobile phone, TE x ) 14 has the same configuration as that of the fourth embodiment shown in FIG.
- the fifth embodiment is different from the first embodiment in that the management device (PNSP) generates an intra-group shared key and encrypted shared key information.
- FIGS. 25 to 29 are sequence charts showing the procedure of the operation according to the fifth embodiment.
- FIG. 25 is a sequence chart of a preparation stage according to the fifth embodiment.
- the third communication terminal owner's mobile phone, TE owner
- the management device (PNSP) generates an intra-group shared key (K PN, y ) for the group (PN y ) (step A2).
- the terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A3)
- the first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
- FIG. 26 is a sequence chart of the user usage registration stage according to the fifth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2).
- the third communication terminal When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the third communication terminal requests the management device (PNSP) to update the intra-group shared key (step C3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step C4).
- FIG. 27 is a sequence chart of a device addition stage according to the fifth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) by adding the second communication terminal (device, nTE z ). Is requested (step D1).
- the third communication terminal owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D2).
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step D6).
- PNSP management device
- FIG. 28 is a sequence chart of a device detachment stage according to the fifth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) which is separated from (PN y) than in Group second participating in (PN y)
- encryption information (K * a, y ) is generated and updated (step F5).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step F6).
- FIG. 29 is a sequence chart of the user departure stage according to the fifth embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- information on (C a, y) requests deletion of (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) sends encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And the update of the in-group shared key (K PN, y ) are requested (step G2).
- the management device updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
- the management device (PNSP) deletes the encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) (step G4).
- the intra-group shared key (encrypted shared key) is delivered from the management device (PNSP) to the second communication terminal (device, nTE z ).
- FIG. 30 is a conceptual diagram according to the sixth embodiment. As shown in FIG. 30, the intra-group shared key is transmitted from the management apparatus (PNSP) to the first communication terminal (user's mobile phone, TE x ), and the first communication terminal (user's mobile phone, After being encrypted with TE x ), it is transmitted as encrypted shared key information from the first communication terminal (user's mobile phone, TE x ) to the second communication terminal (device, nTE z ).
- PNSP management apparatus
- the management apparatus generates an intra-group shared key and transmits it to the first communication terminal (user's mobile phone, TE x ).
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates the encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group.
- the first communication terminal (user's mobile phone, TE x ) encrypts the intra-group shared key using the encryption information, and transmits the encrypted shared key information to the second communication terminal (device, nTE z ). To do.
- the second communication terminal (device, nTE z ) decrypts the intra-group shared key using the encrypted shared key information and the terminal key information.
- FIG. 31 is a diagram of a device configuration according to the sixth embodiment.
- the first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key.
- An information transmission unit 104, an encryption information generation unit 105, an intra-group shared key storage unit 110, an encryption unit 111, an encrypted shared key information transmission unit 112, and an encrypted shared key information storage unit 113 are included.
- the management apparatus (PNSP) 11 includes an intra-group shared key generation unit 205 and an intra-group shared key transmission unit 210.
- the management device (PNSP) generates an intra-group shared key and supplies it to the first communication terminal (user's mobile phone, TE x ), and the first communication terminal (user's mobile phone,
- TE x supplies the encrypted shared key information to the second communication terminal (device, nTE z ).
- FIGS. 32 to 36 are sequence charts showing the procedure of the operation according to the sixth embodiment.
- FIG. 32 is a sequence chart of the user usage registration stage according to the sixth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2).
- the third communication terminal When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the third communication terminal requests the management device (PNSP) to update the intra-group shared key (step C3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step C4).
- the management device updates the updated intra-group shared key to the first communication terminal (user's mobile phone, TE a ) and the first communication terminal (user's mobile phone, TE all ) of other group members.
- (K * PN, y ) is transmitted (step C5).
- the first communication terminal (user's mobile phone, TE all ) of each group member encrypts the updated intra-group shared key (K * PN, y ) using the encryption information (k all, y ).
- FIG. 33 is a sequence chart of a device addition stage according to the sixth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) as the second communication terminal (device, nTE z ). Is requested (step D1).
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4).
- the management device (PNSP) updates the updated intra-group shared key to the first communication terminal (user's mobile phone, TE a ) and the first communication terminal (user's mobile phone, TE all ) of other group members. (K * PN, y ) is transmitted (step D5).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (K * a, y ) and encrypts it.
- FIG. 34 is a sequence chart of the shared key restoration stage according to the sixth embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group.
- the second communication terminal (device, nTE z ) requests the service start (encrypted shared key) of the group (PN y ) from the first communication terminal (user's mobile phone, TE a ).
- the first communication terminal (user's mobile phone, TE a ) transmits an encrypted shared key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source.
- FIG. 35 is a sequence chart of a device detachment stage according to the sixth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4).
- the management device (PNSP) updates the updated intra-group shared key to the first communication terminal (user's mobile phone, TE a ) and the first communication terminal (user's mobile phone, TE all ) of other group members. (K * PN, y ) is transmitted (step F5).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) which is separated from (PN y) than in Group second participating in (PN y)
- encryption information (K * a, y ) is generated and updated (step F6).
- the first communication terminal (user's mobile phone, TE a ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (K * a, y ), and encrypts the shared key information.
- C * a, y E (K * a, y , K * PN, y )” is generated and updated (step F7).
- the first communication terminal of the other group member (user's mobile phone, TE all ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (k all , y ) and encrypts it.
- FIG. 36 is a sequence chart of the user departure stage according to the sixth embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- information on (C a, y) requests deletion of (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) notifies the management device (PNSP) that the first communication terminal (user's mobile phone, TE a ) has left the group and is shared within the group.
- PNSP management device
- An update of the key (K PN, y ) is requested (step G2).
- the management device updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
- the management device (PNSP) transmits the updated in-group shared key (K * PN, y ) to the first communication terminal (user's mobile phone, TE all ) of another group member (step G4).
- the first communication terminal of the other group member (user's mobile phone, TE all ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (k all , y ) and encrypts it.
- the intra-group shared key (encrypted shared key) is delivered from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ).
- FIG. 37 is a conceptual diagram according to the seventh embodiment.
- the intra-group shared key is encrypted by the third communication terminal (owner's mobile phone, TE owner ), and is then used as encrypted shared key information as the third communication terminal (owner's mobile phone). Transmitted from the telephone, TE owner ) to the second communication terminal (device, nTE z ).
- the encrypted shared key information is obtained from the third communication terminal (owner's mobile phone, TE owner ) via the first communication terminal (user's mobile phone, TE x ). , NTE z ).
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key.
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to a third communication terminal (owner's mobile phone, TE owner ).
- the third communication terminal (owner's mobile phone, TE owner ) encrypts the intra-group shared key using the encryption information, and transmits the encrypted shared key information to the second communication terminal (device, nTE z ). To do.
- the second communication terminal (device, nTE z ) decrypts the intra-group shared key using the encrypted shared key information and the terminal key information.
- FIG. 38 is a block diagram of an apparatus according to the seventh embodiment.
- a first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key information transmission unit 104. And an encryption information generation unit 105 and an encryption information transmission unit 106.
- the third communication terminal (owner's mobile phone, TE owner ) 14A includes an intra-group shared key storage unit 301, an encryption information reception unit 302, an encryption unit 303, an encrypted shared key information transmission unit 304, and an encrypted shared A key information storage unit 305 is included.
- the seventh embodiment is different from the first embodiment in that a third communication terminal (owner's mobile phone, TE owner ) generates encrypted shared key information and transmits it to the second communication terminal (device, nTE z ). .
- FIGS. 39 to 43 are sequence charts showing the procedure of the operation according to the seventh embodiment.
- FIG. 39 is a sequence chart of the user usage registration stage according to the seventh embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3).
- the third communication terminal owner's mobile phone, TE owner
- the updated intra-group shared key (k all, y ) is used using the encryption information (k all, y ) corresponding to each group member.
- FIG. 40 is a sequence chart of a device addition stage according to the seventh embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- adds the second communication terminal device, nTE z
- the third communication terminal owner's mobile phone, TE owner
- Is requested step D1
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) sends the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ). Transmit (step D5).
- FIG. 41 is a sequence chart of the shared key restoration stage according to the seventh embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group.
- the second communication terminal (device, nTE z ) requests the third communication terminal (owner's mobile phone, TE owner ) to start the service (encrypted shared key) of the group (PN y ).
- the third communication terminal owner's mobile phone, TE owner
- FIG. 42 is a sequence chart of a device leave stage according to the seventh embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
- the first communication terminal (user's mobile phone, TE a ) has joined the group (PN y ) other than the second communication terminal (device, nTE z ) that has left the group (PN y ).
- encryption information (K * a, y ) is generated and updated (step F4).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step F5).
- the third communication terminal (owner's mobile phone, TE owner ) encrypts the in-group shared key (K * PN, y ) using the encryption information (K * a, y ), and encrypts the shared key information.
- FIG. 43 is a sequence chart of the user departure stage according to the seventh embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2).
- the third communication terminal deletes the encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) (step G3).
- the intra-group shared key (encrypted shared key) is delivered from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ).
- FIG. 44 is a conceptual diagram according to Embodiment 8. As shown in FIG. 44, the intra-group shared key is supplied from the third communication terminal (owner's mobile phone, TE owner ) to the first communication terminal (user's mobile phone, TE x ). communication terminal (user's mobile phone, TE x) after being encrypted by the second communication terminal from the first communication terminal as encrypted shared key information (user's mobile phone, TE x) (device, nTE z) Sent to.
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key and transmits it to the first communication terminal (user's mobile phone, TE x ).
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and
- the intra-group shared key is encrypted using the information, and the encrypted shared key information is transmitted to the second communication terminal (device, nTE z ).
- the second communication terminal decrypts the intra-group shared key using the encrypted shared key information and the terminal key information.
- FIG. 45 is a block diagram of an apparatus according to the eighth embodiment.
- the first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key information transmission unit 104.
- An encryption information generation unit 105 an intra-group shared key storage unit 110, an encryption unit 111, an encrypted shared key information transmission unit 112, and an encrypted shared key information storage unit 113.
- the third communication terminal (owner's mobile phone, TE owner ) 14 ⁇ / b> A includes an intra-group shared key generation unit 310 and an intra-group shared key transmission unit 311.
- the eighth embodiment is different from the first embodiment in that the first communication terminal (user's mobile phone, TE x ) supplies the encrypted shared key information to the second communication terminal (device, nTE z ).
- FIGS. 46 to 49 are sequence charts showing the procedure of the operation according to the eighth embodiment.
- FIG. 46 is a sequence chart of the user usage registration stage according to the eighth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2).
- the updated intra-group shared key (K * PN, ) is sent to the first communication terminal (user's mobile phone, TE a ) . y ) is transmitted (step C3).
- the updated intra-group shared key is sent to the first communication terminal (user's mobile phone, TE all ) of the other group members. (K * PN, y ) is transmitted (step C4).
- FIG. 47 is a sequence chart of a device addition stage according to Embodiment 8. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- adds the second communication terminal device, nTE z
- the third communication terminal owner's mobile phone, TE owner
- Is requested step D1
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) includes the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ).
- the updated intra-group shared key (K * PN, y ) is transmitted (step D3).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (K * a, y ) and encrypts it.
- the shared key restoration stage according to the eighth embodiment is the same as that of the sixth embodiment shown in FIG.
- FIG. 48 is a sequence chart of a device leave stage according to the eighth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) includes the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ).
- the updated intra-group shared key (K * PN, y ) is transmitted (step F3).
- the first communication terminal (user's mobile phone, TE a ) has joined the group (PN y ) other than the second communication terminal (device, nTE z ) that has left the group (PN y ).
- encryption information (K * a, y ) is generated and updated (step F4).
- the first communication terminal (user's mobile phone, TE a ) encrypts the in-group shared key (K * PN, y ) using the encryption information (K * a, y ), and encrypts the shared key information.
- C * a, y E (K * a, y , K * PN, y )” is generated and updated (step F5).
- FIG. 49 is a sequence chart of the user departure stage according to the eighth embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) deletes the first communication terminal (user's mobile phone, TE a ) from the group list, and updates the group list (step G2).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
- the third communication terminal (owner's mobile phone, TE owner ) updates the updated intra-group shared key (K * PN, y ) to the first communication terminal (user's mobile phone, TE all ) of other group members. ) Is transmitted (step G4).
- the first communication terminal of the other group member (user's mobile phone, TE all ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (k all , y ) and encrypts it.
- the intra-group shared key (encrypted shared key) is transferred from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ) via the management device (PNSP).
- FIG. 50 is a conceptual diagram according to Embodiment 9. As shown in FIG. 50, after the intra-group shared key is encrypted by the third communication terminal (owner's mobile phone, TE owner ), the third communication terminal (owner's mobile phone) is used as encrypted shared key information. It is transmitted from the telephone, TE owner ) to the second communication terminal (device, nTE z ) via the management device (PNSP). The encrypted shared key information is further delivered from the management device (PNSP) to the second communication terminal (device, nTE z ) via the first communication terminal (user's mobile phone, TE x ). Also good.
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key.
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to a third communication terminal (owner's mobile phone, TE owner ).
- the third communication terminal (owner's mobile phone, TE owner ) encrypts the intra-group shared key using the encryption information, and transmits the encrypted shared key information to the management device (PNSP).
- the management apparatus (PNSP) transmits the encrypted shared key information to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) decrypts the intra-group shared key using the encrypted shared key information and the terminal key information.
- FIG. 51 is a block diagram of an apparatus according to the ninth embodiment.
- a first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key information transmission unit 104. And an encryption information generation unit 105 and an encryption information transmission unit 106.
- the third communication terminal (owner's mobile phone, TE owner ) 14A includes an intra-group shared key storage unit 301, an encryption information receiving unit 302, an encryption unit 303, and an encrypted shared key information transmission unit 304.
- the management apparatus (PNSP) 11 includes an encrypted shared key information receiving unit 220, an encrypted shared key information storage unit 206, and an encrypted shared key information transmitting unit 204.
- the ninth embodiment is different from the first embodiment in that a third communication terminal (owner's mobile phone, TE owner ) generates encrypted shared key information.
- 52 to 55 are sequence charts showing the procedure of the operation according to the ninth embodiment.
- FIG. 52 is a sequence chart of the user usage registration stage according to the ninth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3).
- the updated intra-group shared key (k all, y ) is used using the encryption information (k all, y ) corresponding to each group member.
- the third communication terminal (owner's mobile phone, TE owner ) transmits the updated encrypted shared key information (C * all, y ) to the management apparatus (PNSP) (step C5).
- PNSP management apparatus
- FIG. 53 is a sequence chart of a device addition stage according to Embodiment 9. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- adds the second communication terminal device, nTE z
- the third communication terminal owner's mobile phone, TE owner
- Is requested step D1
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) sends the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ). Transmit (step D5).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the updated encrypted shared key information (C * a, y , C * all, y ) to the management device (PNSP) (steps). D8).
- FIG. 54 is a sequence chart of a device leave stage according to the ninth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
- the first communication terminal (user's mobile phone, TE a ) has joined the group (PN y ) other than the second communication terminal (device, nTE z ) that has left the group (PN y ).
- encryption information (K * a, y ) is generated and updated (step F4).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step F5).
- the third communication terminal (owner's mobile phone, TE owner ) encrypts the in-group shared key (K * PN, y ) using the encryption information (K * a, y ), and encrypts the shared key information.
- “C * a, y E (K * a, y , K * PN, y )” is generated and updated (step F6).
- the third communication terminal (owner's mobile phone, TE owner ) uses the intra-group shared key (K * PN, y ) and the encryption information (K all, y ) corresponding to each group member.
- the third communication terminal owner's mobile phone, TE owner
- PNSP management apparatus
- FIG. 55 is a sequence chart of the user departure stage according to the ninth embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2).
- the third communication terminal (owner's mobile phone, TE owner ) deletes the encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) (step G3).
- the third communication terminal (owner's mobile phone, TE owner ) uses the intra-group shared key (K * PN, y ) and the encryption information (K all, y ) corresponding to each group member.
- the third communication terminal owner's mobile phone, TE owner
- the management device (PNSP) sends the first communication terminal (user's mobile phone, TE a)
- the encrypted shared key information (C a, y ) related to a ) is deleted.
- TE X User x's mobile phone (first communication terminal, registered communication terminal)
- TE owner Owner's mobile phone (third communication terminal, registered communication terminal)
- PN y Group y nTE z : Device z (second communication terminal, unregistered communication terminal)
- IMS Provider Authentication Platform (IP Multimedia Subsystem)
- Example 10 is an example in which Example 2 and Example 4 are combined.
- the intra-group shared key (encrypted shared key) is delivered from the management apparatus (PNSP) to the second communication terminal (device, nTE z ).
- FIG. 56 is a conceptual diagram according to Embodiment 10. As shown in FIG. 56, the intra-group shared key is divided into the first distributed key and the second distributed key by the secret sharing method at the third communication terminal (owner's mobile phone, TE owner ). To the management device (PNSP). The first distributed key is transmitted from the management apparatus (PNSP) to the second communication terminal (device, nTE z ).
- the second distributed key is encrypted by the management device (PNSP), and then transmitted from the management device (PNSP) to the second communication terminal (device, nTE z ) as encrypted distributed key information.
- the first distributed key and the encrypted distributed key information are transmitted from the management device (PNSP) via the first communication terminal (user's mobile phone, TE x ) to the second communication terminal (device, nTE z ) May be delivered to.
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key.
- the third communication terminal (owner's mobile phone, TE owner ) divides the intra-group shared key into the first distributed key and the second distributed key by the secret sharing method, and the first shared key and the second shared key
- the distributed key is transmitted to the management device (PNSP).
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to the management device (PNSP).
- the management apparatus (PNSP) encrypts the second distributed key using the encryption information, and transmits the encrypted distributed key information to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) decrypts the second distributed key using the encrypted distributed key information and the terminal key information.
- the management apparatus (PNSP) transmits the first distributed key to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) restores the intra-group shared key using the first distributed key and the second distributed key.
- FIG. 57 is a block diagram of an apparatus according to the tenth embodiment.
- the third communication terminal (owner's mobile phone, TE owner ) 14 ⁇ / b> A has a distributed key supply unit 330.
- the management apparatus (PNSP) includes an encryption information receiving unit 202, an encryption unit 203, a distributed key storage unit 240, an encrypted distributed key information transmission unit 241, a distributed key transmission unit 242, and an encrypted distributed key information storage unit 243.
- the first communication terminal (user's mobile phone, TE x ) 14 has the same configuration as that of the fourth embodiment shown in FIG.
- the tenth embodiment is different from the second embodiment in that the management device (PNSP) generates encrypted distributed key information.
- 58 to 62 are sequence charts showing the procedure of the operation according to the tenth embodiment.
- FIG. 58 is a sequence chart of a preparation stage according to the tenth embodiment.
- the third communication terminal owner's mobile phone, TE owner
- K PN, y an intra-group shared key for the group (PN y ) (step A1).
- the terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A2), and the first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
- FIG. 59 is a sequence chart of the user usage registration stage according to the tenth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”.
- FIG. 60 is a sequence chart of a device addition stage according to the tenth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2).
- the third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the intra-group shared key difference ( ⁇ K PN, y ) to the management device (PNSP) (step C 4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step D6).
- PNSP management device
- FIG. 61 is a sequence chart of a device detachment stage according to the tenth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the intra-group shared key difference ( ⁇ K PN, y ) to the management device (PNSP) (step F4).
- PNSP management device
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) which is separated from (PN y) than in Group second participating in (PN y)
- encryption information (K * a, y ) is generated and updated (step F5).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step F6).
- the management device uses the difference ( ⁇ K PN, y ) of the intra-group shared key to use the second distributed key (U a, y ) corresponding to the first communication terminal (user's mobile phone, TE a ).
- Is updated to “U * a, y Update (U a, y , ⁇ K PN, y )”, and the second distribution updated using the encryption information (K * a, y )
- FIG. 62 is a sequence chart of the user departure stage according to the tenth embodiment. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2).
- the third communication terminal (owner's mobile phone, TE owner ) sends encrypted distributed key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And deletion of the first distributed key (S a, y ), and the difference ( ⁇ K PN, y ) of the intra-group shared key is transmitted (step G3).
- the management device deletes the encrypted distributed key information (C a, y ) and the first distributed key (S a, y ) relating to the first communication terminal (user's mobile phone, TE a ) (step G4).
- Example 11 is an example in which Example 2 and Example 5 are combined.
- the intra-group shared key (encrypted shared key) is delivered from the management apparatus (PNSP) to the second communication terminal (device, nTE z ).
- FIG. 63 is a conceptual diagram according to Embodiment 11. As shown in FIG. 63, the intra-group shared key is divided into a first shared key and a second shared key by the secret sharing method in the management apparatus (PNSP). The first distributed key is transmitted from the management apparatus (PNSP) to the second communication terminal (device, nTE z ).
- the second distributed key is encrypted by the management device (PNSP), and then transmitted from the management device (PNSP) to the second communication terminal (device, nTE z ) as encrypted distributed key information.
- the first distributed key and the encrypted distributed key information are transmitted from the management device (PNSP) via the first communication terminal (user's mobile phone, TE x ) to the second communication terminal (device, nTE z ) May be delivered to.
- the management apparatus generates an intra-group shared key.
- the management device divides the intra-group shared key into a first distributed key and a second distributed key by a secret sharing method.
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to the management device (PNSP).
- the management apparatus encrypts the second distributed key using the encryption information, and transmits the encrypted distributed key information to the second communication terminal (device, nTE z ).
- the second communication terminal decrypts the second distributed key using the encrypted distributed key information and the terminal key information.
- the management apparatus transmits the first distributed key to the second communication terminal (device, nTE z ).
- the second communication terminal restores the intra-group shared key using the first distributed key and the second distributed key.
- FIG. 64 is a diagram of a device configuration according to Embodiment 11.
- the management apparatus (PNSP) 11 includes an intra-group shared key storage unit 201, an encryption information reception unit 202, an encryption unit 203, a distributed key storage unit 240, an encrypted distributed key information transmission unit 241, and a distributed key.
- a transmission unit 242, an encrypted distributed key information storage unit 243, and a distributed key supply unit 250 are included.
- the first communication terminal (user's mobile phone, TE x ) 14 has the same configuration as that of the fourth embodiment shown in FIG.
- the eleventh embodiment is different from the second embodiment in that the management apparatus (PNSP) generates an intra-group shared key and encrypted distributed key information.
- FIGS. 65 to 69 are sequence charts showing the procedure of the operation according to the eleventh embodiment.
- FIG. 65 is a sequence chart of a preparation stage according to Embodiment 11.
- the third communication terminal owner's mobile phone, TE owner
- the management device (PNSP) generates an intra-group shared key (K PN, y ) for the group (PN y ) (step A2).
- the terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A3)
- the first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
- FIG. 66 is a sequence chart of the user usage registration stage according to Embodiment 11. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2).
- the management device updates the intra-group shared key and the first communication terminal (user's mobile phone, TE.
- the generation of the first distributed key (S a, y ) and the second distributed key (U a, y ) corresponding to a ) is requested (step C3).
- the management device updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ”, and the first communication terminal (user's mobile phone, TE a )
- FIG. 67 is a sequence chart of a device addition stage according to Embodiment 11. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) by adding the second communication terminal (device, nTE z ). Is requested (step D1).
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step D6).
- PNSP management device
- FIG. 68 is a sequence chart of a device detachment stage according to the eleventh embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) which is separated from (PN y) than in Group second participating in (PN y)
- encryption information (K * a, y ) is generated and updated (step F5).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the management device (PNSP) (step F6).
- the management device uses the difference ( ⁇ K PN, y ) of the intra-group shared key to use the second distributed key (U a, y ) corresponding to the first communication terminal (user's mobile phone, TE a ).
- Is updated to “U * a, y Update (U a, y , ⁇ K PN, y )”, and the second distribution updated using the encryption information (K * a, y )
- FIG. 69 is a sequence chart of a user departure stage according to Embodiment 11. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) sends encrypted distributed key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And deletion of the first distributed key (S a, y ) and update of the intra-group shared key (K PN, y ) are requested (step G2).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
- the management device (PNSP) deletes the encrypted distributed key information (C a, y ) and the first distributed key (S a, y ) relating to the first communication terminal (user's mobile phone, TE a ) (step G4).
- Example 12 is an example in which Example 2 and Example 6 are combined.
- the intra-group shared key (encrypted shared key) is delivered from the management apparatus (PNSP) to the second communication terminal (device, nTE z ).
- FIG. 70 is a conceptual diagram according to Embodiment 12. As shown in FIG. 70, the intra-group shared key is divided into the first distributed key and the second distributed key by the secret sharing method in the management apparatus (PNSP), and then the first shared key from the management apparatus (PNSP). To the communication terminal (user's mobile phone, TE x ). The first distributed key is transmitted from the first communication terminal (user's mobile phone, TE x ) to the second communication terminal (device, nTE z ).
- the second distributed key is encrypted by the first communication terminal (user's mobile phone, TE x )
- the second distributed key is encrypted as encrypted distributed key information from the first communication terminal (user's mobile phone, TE x ).
- the second communication terminal device, nTE z ).
- the management apparatus generates an intra-group shared key.
- the management device (PNSP) divides the intra-group shared key into a first distributed key and a second distributed key by a secret sharing method.
- the management device (PNSP) transmits the first distributed key and the second distributed key to the first communication terminal (user's mobile phone, TE x ).
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates the encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group.
- the first communication terminal (user's mobile phone, TE x ) encrypts the second distributed key using the encryption information, and transmits the encrypted distributed key information to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) decrypts the second distributed key using the encrypted distributed key information and the terminal key information.
- the first communication terminal (user's mobile phone, TE x ) transmits the first distributed key to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) restores the intra-group shared key using the first distributed key and the second distributed key.
- FIG. 71 is a block diagram of an apparatus according to the twelfth embodiment.
- a first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key information transmission unit 104.
- An encryption information generation unit 105 an encryption unit 111, a distributed key storage unit 130, an encrypted distributed key information transmission unit 131, a distributed key transmission unit 132, and an encrypted distributed key information storage unit 133.
- the management apparatus (PNSP) 11 includes a distributed key transmission unit 242 and a distributed key supply unit 250.
- the management device (PNSP) generates a distributed key and supplies it to the first communication terminal (user mobile phone, TE x ), and the first communication terminal (user mobile phone, TE x). ) Is different from the second embodiment in that the first distributed key and the encrypted distributed key information are supplied to the second communication terminal (device, nTE z ).
- FIGS. 72 to 76 are sequence charts showing the procedure of the operation according to the twelfth embodiment.
- FIG. 72 is a sequence chart of the user usage registration stage according to the twelfth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2).
- the management device updates the intra-group shared key and the first communication terminal (user's mobile phone, TE.
- the generation of the first distributed key (S a, y ) and the second distributed key (U a, y ) corresponding to a ) is requested (step C3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ”, and the first communication terminal (user's mobile phone, TE a )
- the management device (PNSP) transmits the intra-group shared key difference ( ⁇ K PN, y ) to the first communication terminal (user's mobile phone, TE all ) of another group member (step C5).
- the management device transmits the first distributed key (S a, y ) and the second distributed key (U a, y ) to the first communication terminal (user's mobile phone, TE a ).
- FIG. 73 is a sequence chart of a device addition stage according to Embodiment 12. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- adds the second communication terminal device, nTE z
- the third communication terminal owner's mobile phone, TE owner
- Is requested step D1
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4).
- the management device (PNSP) compares the difference between the intra-group shared keys with respect to the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). ( ⁇ K PN, y ) is transmitted (step D5).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) encrypts the second distributed key (U a, y ) using the encryption information (K * a, y ) and encrypts it.
- the first communication terminal of each group member user's mobile phone, TE all
- the difference of the shared key in the group [Delta] K PN, y) using a first distributed key (S all, y) to "S * all, y Update ( S all, y, ⁇ K PN, y) " is updated (step D8).
- FIG. 74 is a sequence chart of the shared key restoration stage according to the twelfth embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group.
- the second communication terminal (device, nTE z ) requests the service start (encrypted shared key) of the group (PN y ) from the first communication terminal (user's mobile phone, TE a ). (Step E1).
- the first communication terminal (user's mobile phone, TE a ) sends an encrypted distributed key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source.
- Information (C a, y ) and the first distributed key (S a, y ) are transmitted (step E2).
- FIG. 75 is a sequence chart of a device leave stage according to Embodiment 12. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3).
- the management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4).
- the management device (PNSP) compares the difference between the intra-group shared keys with respect to the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). ( ⁇ K PN, y ) is transmitted (step F5).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) which is separated from (PN y) than in Group second participating in (PN y)
- encryption information K * a, y ) is generated and updated (step F6).
- FIG. 76 is a sequence chart of a user leave stage according to Embodiment 12. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- information on (C a, y) requests deletion of (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) notifies the management device (PNSP) that the first communication terminal (user's mobile phone, TE a ) has left the group and is shared within the group.
- PNSP management device
- An update of the key (K PN, y ) is requested (step G2).
- the management device updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
- the management device (PNSP) transmits the difference ( ⁇ K PN, y ) of the intra-group shared key to the first communication terminal (user's mobile phone, TE all ) of another group member (step G4).
- Example 13 is an example in which Example 2 and Example 7 are combined.
- the intra-group shared key (encrypted shared key) is delivered from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ).
- FIG. 77 is a conceptual diagram according to Embodiment 13. As shown in FIG. 77, the intra-group shared key is divided into the first distributed key and the second distributed key by the secret sharing method at the third communication terminal (owner's mobile phone, TE owner ). The first distributed key is transmitted from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ).
- the first distributed key and the encrypted distributed key information are transmitted from the third communication terminal (owner's mobile phone, TE owner ) via the first communication terminal (user's mobile phone, TE x ). It may be delivered to two communication terminals (devices, nTE z ).
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key.
- the third communication terminal (owner's mobile phone, TE owner ) divides the intra-group shared key into the first distributed key and the second distributed key by the secret sharing method.
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to a third communication terminal (owner's mobile phone, TE owner ).
- the third communication terminal (owner's mobile phone, TE owner ) encrypts the second distributed key using the encryption information, and transmits the encrypted distributed key information to the second communication terminal (device, nTE z ).
- the second communication terminal decrypts the second distributed key using the encrypted distributed key information and the terminal key information.
- the third communication terminal (owner's mobile phone, TE owner ) transmits the first distributed key to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) restores the intra-group shared key using the first distributed key and the second distributed key.
- FIG. 78 is a diagram of a device configuration according to Embodiment 13.
- a third communication terminal (owner's mobile phone, TE owner ) 14A includes an intra-group shared key storage unit 301, an encryption information reception unit 302, an encryption unit 303, a distributed key supply unit 330, and encryption.
- a distributed key information transmission unit 340, a distributed key storage unit 341, a distributed key transmission unit 342, and an encrypted distributed key information storage unit 343 are included.
- the first communication terminal (user's mobile phone, TE x ) 14 has the same configuration as that of the seventh embodiment shown in FIG. Embodiment 13 differs from Embodiment 2 in that a third communication terminal (owner's mobile phone, TE owner ) generates encrypted distributed key information and transmits it to the second communication terminal (device, nTE z ). .
- FIGS. 79 to 83 are sequence charts showing the procedure of the operation according to the thirteenth embodiment.
- FIG. 79 is a sequence chart of a user usage registration stage according to Embodiment 13. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”.
- FIG. 80 is a sequence chart of a device addition stage according to Embodiment 13. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) by adding the second communication terminal (device, nTE z ). Is requested (step D1).
- the third communication terminal owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2).
- the third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) sends the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ). Transmit (step D5).
- the third communication terminal (owner's mobile phone, TE owner ) uses the encryption information (K * a, y ) to correspond to the first communication terminal (user's mobile phone, TE a ).
- FIG. 81 is a sequence chart of the shared key restoration stage according to the thirteenth embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group.
- the second communication terminal (device, nTE z ) requests the service start (encrypted shared key) of the group (PN y ) from the third communication terminal (owner's mobile phone, TE owner ). (Step E1).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the encrypted distributed key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source.
- FIG. 82 is a sequence chart of a device leave stage according to Embodiment 13. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
- the first communication terminal (user's mobile phone, TE a ) has joined the group (PN y ) other than the second communication terminal (device, nTE z ) that has left the group (PN y ).
- encryption information (K * a, y ) is generated and updated (step F4).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step F5).
- the third communication terminal uses the intra-group shared key difference ( ⁇ K PN, y ) to correspond to the first communication terminal (user's mobile phone, TE a ).
- encrypting the updated second distributed key (U * a, y ) to generate encrypted distributed key information “C * a, y E (k * a, y , U * a, y )” And update (step F6).
- FIG. 83 is a sequence chart of the user departure stage according to Embodiment 13. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2).
- Third communication terminal owner of the mobile phone, TE owner
- the first communication terminal user's mobile phone, TE a
- encrypted distributed key information about the (C a, y) and the first distributed key (S a, y ) are deleted (step G3).
- Example 14 is an example in which Example 2 and Example 8 are combined.
- the intra-group shared key (encrypted shared key) is delivered from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ).
- FIG. 84 is a conceptual diagram according to Embodiment 14. As shown in FIG. 84, the intra-group shared key is divided into the first distributed key and the second distributed key by the secret sharing method at the third communication terminal (owner's mobile phone, TE owner ). The first distributed key is transferred from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ) via the first communication terminal (user's mobile phone, TE x ).
- the second distributed key is transmitted from the third communication terminal (owner's mobile phone, TE owner ) to the first communication terminal (user's mobile phone, TE x ), and the first communication terminal (user's mobile phone) , TE x ) and then transmitted as encrypted distributed key information from the first communication terminal (user's mobile phone, TE x ) to the second communication terminal (device, nTE z ).
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key.
- the third communication terminal (owner's mobile phone, TE owner ) divides the intra-group shared key into the first distributed key and the second distributed key by the secret sharing method, and the first communication terminal (user's mobile phone).
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates the encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group.
- the first communication terminal (user's mobile phone, TE x ) encrypts the second distributed key using the encryption information, and transmits the encrypted distributed key information to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) decrypts the second distributed key using the encrypted distributed key information and the terminal key information.
- the first communication terminal (user's mobile phone, TE x ) transmits the first distributed key to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) restores the intra-group shared key using the first distributed key and the second distributed key.
- FIG. 85 is a diagram of a device configuration according to Embodiment 14.
- a first communication terminal (user's mobile phone, TE x ) 14 includes a terminal individual information generation unit 101, a terminal individual information storage unit 102, a terminal key information generation unit 103, and a terminal key information transmission unit 104.
- an encryption information generation unit 105 an encryption unit 111, a distributed key storage unit 130, an encrypted distributed key information transmission unit 131, a distributed key transmission unit 132, and an encrypted distributed key information storage unit 133.
- the third communication terminal (owner's mobile phone, TE owner ) 14 ⁇ / b> A includes an intra-group shared key generation unit 310 and a distributed key supply unit 330.
- the fourteenth embodiment is different from the second embodiment in that the first communication terminal (user's mobile phone, TE x ) supplies the encrypted distributed key information to the second communication terminal (device, nTE z ).
- 86 to 89 are sequence charts showing the procedure of the operation according to the fourteenth embodiment.
- FIG. 86 is a sequence chart of a user usage registration stage according to Embodiment 14. This is a stage in which the user performs usage registration with the group owner when joining the group. 86, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”.
- the third communication terminal owner's mobile phone, TE owner
- the difference in the intra-group shared key with respect to the first communication terminal (user's mobile phone, TE all ) of other group members ( ⁇ K PN, y ) is transmitted (step C4).
- FIG. 87 is a sequence chart of a device addition stage according to Embodiment 14. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal user's mobile phone, TE a
- adds the second communication terminal device, nTE z
- the third communication terminal owner's mobile phone, TE owner
- Is requested step D1
- the third communication terminal owner's mobile phone, TE owner
- the third communication terminal (owner's mobile phone, TE owner ) includes the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). In contrast, the difference ( ⁇ K PN, y ) of the intra-group shared key is transmitted (step D3).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) encrypts the second distributed key (U a, y ) using the encryption information (K * a, y ) and encrypts it.
- the first communication terminal of each group member user's mobile phone, TE all
- the difference of the shared key in the group [Delta] K PN, y) using a first distributed key (S all, y) to "S * all, y Update ( S all, y, ⁇ K PN, y) " is updated (step D6).
- the shared key restoration stage according to the fourteenth embodiment is the same as the twelfth embodiment shown in FIG.
- FIG. 88 is a sequence chart of a device leave stage according to Embodiment 14. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device leave request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) includes the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). In contrast, the difference ( ⁇ K PN, y ) of the intra-group shared key is transmitted (step F3).
- the first communication terminal (user's mobile phone, TE a ) has joined the group (PN y ) other than the second communication terminal (device, nTE z ) that has left the group (PN y ).
- encryption information (K * a, y ) is generated and updated (step F4).
- FIG. 89 is a sequence chart of a user departure stage according to Embodiment 14. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) deletes the first communication terminal (user's mobile phone, TE a ) from the group list, and updates the group list (step G2).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
- the third communication terminal (owner's mobile phone, TE owner ) is different from the other group member's first communication terminal (user's mobile phone, TE all ) in the group shared key difference ( ⁇ K PN, y ). Is transmitted (step G4).
- the fifteenth embodiment is a combination of the second embodiment and the ninth embodiment.
- the intra-group shared key (encrypted shared key) is transmitted from the third communication terminal (owner's mobile phone, TE owner ) via the management device (PNSP) to the second communication terminal (device, nTE z).
- FIG. 90 is a conceptual diagram according to Embodiment 15. As shown in FIG. 90, the intra-group shared key is divided into the first distributed key and the second distributed key by the secret sharing method at the third communication terminal (owner's mobile phone, TE owner ). The first distributed key is transmitted from the third communication terminal (owner's mobile phone, TE owner ) to the second communication terminal (device, nTE z ) via the management device (PNSP).
- the second distributed key, the third communication terminal (owner of the mobile phone, TE owner) after being encrypted, the third communication terminal (owner of the mobile phone, TE owner) as encrypted distributed key information management from It is transmitted to the second communication terminal (device, nTE z ) via the device (PNSP).
- the first distributed key and the encrypted distributed key information are transmitted from the management device (PNSP) to the second communication terminal (device, nTE) via the first communication terminal (user's mobile phone, TE x ). z ) may be delivered.
- the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key.
- the third communication terminal (owner's mobile phone, TE owner ) divides the intra-group shared key into the first distributed key and the second distributed key by the secret sharing method.
- the first communication terminal (user's mobile phone, TE x ) generates terminal key information from the terminal individual information for each second communication terminal (device, nTE z ) that participates in the group, and the terminal key Information is transmitted to the second communication terminal (device, nTE z ).
- the first communication terminal (user's mobile phone, TE x ) generates encryption information using the terminal individual information of the second communication terminal (device, nTE z ) to join the group, and Information is transmitted to a third communication terminal (owner's mobile phone, TE owner ).
- the third communication terminal (owner's mobile phone, TE owner ) encrypts the second distributed key using the encryption information, and transmits the encrypted distributed key information to the management device (PNSP).
- the management apparatus (PNSP) transmits the encrypted distributed key information to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) decrypts the second distributed key using the encrypted distributed key information and the terminal key information.
- the third communication terminal (owner's mobile phone, TE owner ) transmits the first distributed key to the management device (PNSP).
- the management apparatus (PNSP) transmits the first distributed key to the second communication terminal (device, nTE z ).
- the second communication terminal (device, nTE z ) restores the intra-group shared key using the first distributed key and the second distributed key.
- FIG. 91 is a diagram of a device configuration according to Embodiment 15.
- a third communication terminal (owner's mobile phone, TE owner ) 14A includes an intra-group shared key storage unit 301, an encryption information reception unit 302, an encryption unit 303, a distributed key supply unit 330, an encryption The distributed key information transmission unit 340, the distributed key storage unit 341, and the distributed key transmission unit 342 are included.
- the management apparatus (PNSP) 11 includes a distributed key storage unit 240, an encrypted distributed key information transmission unit 241, a distributed key transmission unit 242, an encrypted distributed key information reception unit 260, and an encrypted distributed key information storage unit 243.
- the first communication terminal (user's mobile phone, TE x ) 14 has the same configuration as that of the ninth embodiment shown in FIG.
- the fifteenth embodiment is different from the second embodiment in that a third communication terminal (owner's mobile phone, TE owner ) generates encrypted distributed key information.
- FIGS. 92 to 95 are sequence charts showing the procedure of the operation according to the fifteenth embodiment.
- FIG. 92 is a sequence chart of the user usage registration stage according to Embodiment 15. This is a stage in which the user performs usage registration with the group owner when joining the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1).
- the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y )
- the in-group shared key (K PN, y ) is obtained from “K PN, y ”.
- FIG. 93 is a sequence chart of the device addition stage according to Embodiment 15. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration.
- the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) as the second communication terminal (device, nTE z ). Is requested (step D1).
- the third communication terminal owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2).
- the third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
- the first communication terminal (user's mobile phone, TE a) the group the second communication terminal (device, nTE z) was added to (PN y) and already Groups second participating in (PN y)
- Individual terminal information (I a, z , I a, w (w ⁇ P a, y , P a, y ) corresponding to each communication terminal (device, nTE z )
- the first communication terminal (user's mobile phone, TE a ) sends the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ). Transmit (step D5).
- the third communication terminal uses the encryption information (K * a, y ) to correspond to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal owner's mobile phone, TE owner ) sends the group shared key difference ( ⁇ K PN, y ) and encrypted distributed key information (C * a, y ) to the management device (PNSP). Transmit (step D7).
- FIG. 94 is a sequence chart of the device removal stage according to Embodiment 15. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group.
- the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2).
- the third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
- the first communication terminal (user's mobile phone, TE a ) has joined the group (PN y ) other than the second communication terminal (device, nTE z ) that has left the group (PN y ).
- encryption information (K * a, y ) is generated and updated (step F4).
- the first communication terminal (user's mobile phone, TE a ) transmits the updated encryption information (K * a, y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step F5).
- the third communication terminal uses the intra-group shared key difference ( ⁇ K PN, y ) to correspond to the first communication terminal (user's mobile phone, TE a ).
- encrypting the updated second distributed key (U * a, y ) to generate encrypted distributed key information “C * a, y E (k * a, y , U * a, y )” And update (step F6).
- the third communication terminal (owner's mobile phone, TE owner ) sends the group shared key difference ( ⁇ K PN, y ) and encrypted distributed key information (C * a, y ) to the management device (PNSP). Transmit (step F7).
- FIG. 95 is a sequence chart of the user departure stage according to Embodiment 15. This is the stage that is performed when the group owner causes the user to leave the group.
- the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a).
- Is requested to delete information (C a, y ) (step G1).
- the third communication terminal owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ).
- the third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2).
- the third communication terminal (owner's mobile phone, TE owner ) transmits the group shared key difference ( ⁇ K PN, y ) to the management device (PNSP), and the first communication terminal (user's A request is made to delete the encrypted distributed key information (C a, y ) and the first distributed key (S a, y ) relating to the cellular phone, TE a ) (step G3).
- the management device deletes the encrypted distributed key information (C a, y ) and the first distributed key (S a, y ) relating to the first communication terminal (user's mobile phone, TE a ) (step G4).
- the intra-group shared key distribution method according to the third embodiment may be applied to the above-described embodiments 10 to 15.
- the “computer system” may include an OS and hardware such as peripheral devices. Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
- “Computer-readable recording medium” means a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disk), and a built-in computer system.
- a storage device such as a hard disk.
- the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic Random Access Memory)), etc., which hold programs for a certain period of time.
- the program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium.
- the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
- the program may be for realizing a part of the functions described above. Furthermore, what can implement
- a plurality of devices that are located apart via a network (for example, a user communication terminal and an HSS, a user communication terminal and an application server, a user communication terminal and a communication terminal of another user, etc. ),
- a key for realizing highly secure intra-group communication can be shared between devices, and communication can be performed in a manner that guarantees the confidentiality and integrity of the communication contents.
- a certain device leaves the group, it is possible to prevent the device from restoring the intra-group shared key using the information held in the device after leaving. Thereby, it is possible to prevent a user who has left the group from intercepting communication within the group.
- the present invention can be applied to a key sharing system in which a plurality of terminal devices share a key on a network.
- TE Registered communication terminal
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Storage Device Security (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Description
ひとつの解決手段に係る鍵共有システムは、同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおいて、前記通信端末のうちの第1の通信端末は、前記グループ内共有鍵を記憶するグループ内共有鍵記憶手段と、前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、前記端末個別情報を記憶する端末個別情報記憶手段と、前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、前記暗号化用情報を用いて、前記グループ内共有鍵を暗号化する暗号化手段と、前記暗号化により得られた暗号化共有鍵情報を前記管理装置へ送信する暗号化共有鍵情報送信手段と、を有し、前記管理装置は、前記第1の通信端末から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、前記受信された暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、前記暗号化共有鍵情報記憶手段に記憶される暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、を有し、前記第2の通信端末は、前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、前記管理装置から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、前記受信された端末用鍵情報と前記受信された暗号化共有鍵情報を用いて、前記グループ内共有鍵を復元する復号化手段と、を有し、前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を用いて前記グループ内共有鍵を暗号化した暗号化共有鍵情報を前記管理装置へ送信し、前記管理装置に記憶される暗号化共有鍵情報を更新させる、ことを特徴とする。 In order to solve the above problems, the present invention has the following solutions.
The key sharing system according to one solution means is the key sharing system comprising: a communication terminal belonging to the same group; and a management device that holds information for sharing an intra-group shared key between the communication terminals. A first communication terminal that generates individual terminal individual information for each of the intra-group shared key storage unit that stores the intra-group shared key and the second communication terminal of the communication terminals. Terminal key information generation for generating individual terminal key information for each of the second communication terminals using the information generation means, the terminal individual information storage means for storing the terminal individual information, and the terminal individual information Means, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information are used to generate encryption information common to the second communication terminal. Encrypting information generating means, encrypting means for encrypting the intra-group shared key using the encryption information, and transmitting the encrypted shared key information obtained by the encryption to the management apparatus Encrypted shared key information transmitting means, wherein the management device receives encrypted shared key information from the first communication terminal, and the received encrypted shared key information receiving means. Encrypted shared key information storage means for storing key information; encrypted shared key information transmission means for transmitting encrypted shared key information stored in the encrypted shared key information storage means to the second communication terminal; And the second communication terminal includes terminal key information receiving means for receiving terminal key information from the first communication terminal, and encrypted shared key information for receiving encrypted shared key information from the management apparatus. Information receiving means and the received terminal key And the decryption means for restoring the intra-group shared key using the received encrypted shared key information, and the first communication terminal leaves the group. When a terminal is generated, the encryption information is updated using terminal individual information of only the second communication terminal remaining in the group, and the intra-group shared key is updated using the updated encryption information. Is transmitted to the management apparatus, and the encrypted shared key information stored in the management apparatus is updated.
これにより、前述の通信端末(第1の通信端末)がコンピュータを利用して実現できるようになる。 A computer program according to another solution means the communication terminal in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals ( A computer program for performing a key sharing process of the first communication terminal), the step of storing the intra-group shared key in a storage means, and each of the second communication terminals of the communication terminals individually Generating individual terminal information; storing the individual terminal information in a storage; and generating individual terminal key information for each of the second communication terminals using the individual terminal information; The terminal key information is transmitted to the second communication terminal, and the terminal individual information is used for encryption common to the second communication terminal. Generating information, encrypting the intra-group shared key using the encryption information, transmitting encrypted shared key information obtained by the encryption to the management device, Updating the encryption information using terminal-specific information of only the second communication terminal remaining in the group when the second communication terminal leaving the group occurs, and the updated Transmitting encrypted shared key information obtained by encrypting the intra-group shared key using encryption information to the management device, and updating the encrypted shared key information stored in the management device; A computer program for execution.
As a result, the above-described communication terminal (first communication terminal) can be realized using a computer.
これにより、前述の通信端末(第1の通信端末)がコンピュータを利用して実現できるようになる。 A computer program according to another solution means the communication terminal in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals ( A computer program for performing a key sharing process of the first communication terminal), storing a second distributed key of the intra-group shared key in a storage unit, and a second communication of the communication terminals A step of generating individual terminal individual information for each of the terminals, a step of storing the terminal individual information in a storage means, and an individual terminal key for each of the second communication terminals using the terminal individual information. Generating the information, transmitting the terminal key information to the second communication terminal, and using the terminal individual information, the second communication terminal A step of generating general encryption information, a step of encrypting the second distributed key using the encryption information, and an encryption distributed key information obtained by the encryption. And the step of updating the information for encryption using terminal individual information of only the second communication terminal remaining in the group when the second communication terminal leaving the group occurs. And transmitting the encrypted distributed key information obtained by encrypting the second distributed key using the updated encryption information to the management device, and updating the encrypted distributed key information stored in the management device. And a step of causing the computer to execute the step.
As a result, the above-described communication terminal (first communication terminal) can be realized using a computer.
前記鍵共有システムにおいては、前記管理装置は、前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段を備えたことを特徴とする。 A key sharing system according to another solution means a key sharing system having a communication terminal belonging to the same group and a management device, wherein the first communication terminal of the communication terminals is the second of the communication terminals. Terminal individual information generating means for generating individual terminal individual information for each of the communication terminals, terminal individual information storage means for storing the terminal individual information, and using the terminal individual information, the second communication terminal Using terminal key information generating means for generating individual terminal key information, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information, An encryption information generation unit that generates encryption information common to the second communication terminal; and an encryption information transmission unit that transmits the encryption information to the management device. The device An encryption information receiving means for receiving the encryption information from the communication terminal, an encryption means for encrypting an intra-group shared key of the group using the encryption information, and obtained by the encryption. Encrypted shared key information storage means for storing the encrypted shared key information, and encrypted shared key information transmission means for transmitting the encrypted shared key information to the second communication terminal, The communication terminal of 2 includes terminal key information receiving means for receiving terminal key information from the first communication terminal, encrypted shared key information receiving means for receiving encrypted shared key information from the management apparatus, Decrypting means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information, wherein the first communication terminal leaves the group The second communication terminal to occur In addition, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption information is transmitted to the management device. .
In the key sharing system, the management device includes an intra-group shared key generation unit that generates an intra-group shared key of the group.
前記管理装置は、前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段を備えたことを特徴とする。 A management apparatus according to another solution is the management apparatus in a key sharing system including a communication terminal belonging to the same group and a management apparatus, and the encryption information is transmitted from the first communication terminal of the communication terminals. Storing the encryption information receiving means for receiving the encryption information, the encryption means for encrypting the intra-group shared key of the group using the encryption information, and the encrypted shared key information obtained by the encryption Encrypted shared key information storage means, and encrypted shared key information transmission means for transmitting the encrypted shared key information to a second communication terminal of the communication terminals.
The management apparatus includes an intra-group shared key generation unit that generates an intra-group shared key of the group.
前記鍵共有システムにおいては、前記管理装置は、前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段と、前記グループ内共有鍵から第1及び第2の分散鍵を生成する分散鍵生成手段と、を備えたことを特徴とする。 A key sharing system according to another solution means a key sharing system having a communication terminal belonging to the same group and a management device, wherein the first communication terminal of the communication terminals is the second of the communication terminals. Terminal individual information generating means for generating individual terminal individual information for each of the communication terminals, terminal individual information storage means for storing the terminal individual information, and using the terminal individual information, the second communication terminal Using terminal key information generating means for generating individual terminal key information, terminal key information transmitting means for transmitting the terminal key information to the second communication terminal, and the terminal individual information, An encryption information generation unit that generates encryption information common to the second communication terminal; and an encryption information transmission unit that transmits the encryption information to the management device. The device An encryption information receiving means for receiving the encryption information from the communication terminal, and the second distributed key of the first and second distributed keys generated from the intra-group shared key of the group, Encryption means for encrypting using the encryption information, encryption distributed key information storage means for storing the encrypted distributed key information obtained by the encryption, and the encrypted distributed key information for the second Encrypted distributed key information transmitting means for transmitting to the communication terminal, and first distributed key transmitting means for transmitting the first distributed key to the second communication terminal, the second communication terminal Includes: terminal key information receiving means for receiving terminal key information from the first communication terminal; encrypted distributed key information receiving means for receiving encrypted distributed key information from the management apparatus; and A distributed key receiving means for receiving one distributed key; Using the terminal key information and the received encrypted shared key information, decryption means for restoring the second shared key, the received first shared key and the restored second key Distributed key combining means for combining the distributed keys to restore the intra-group shared key, and when the first communication terminal occurs when the second communication terminal leaving the group occurs, The encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption information is transmitted to the management device.
In the key sharing system, the management device generates an intra-group shared key generation unit that generates an intra-group shared key of the group, and a distributed key generation that generates first and second distributed keys from the intra-group shared key Means.
前記管理装置は、前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段と、前記グループ内共有鍵から第1及び第2の分散鍵を生成する分散鍵生成手段と、を備えたことを特徴とする。 A management apparatus according to another solution is the management apparatus in a key sharing system including a communication terminal belonging to the same group and a management apparatus, and the encryption information is transmitted from the first communication terminal of the communication terminals. And encrypting the second distributed key of the first and second distributed keys generated from the intra-group shared key of the group using the encryption information. Encryption means for encryption, encryption distributed key information storage means for storing the encrypted distributed key information obtained by the encryption, and the encrypted distributed key information to the second communication terminal of the communication terminals An encrypted distributed key information transmitting unit for transmitting, and a first distributed key transmitting unit for transmitting the first distributed key to the second communication terminal.
The management apparatus includes an intra-group shared key generation unit that generates an intra-group shared key of the group, and a distributed key generation unit that generates first and second distributed keys from the intra-group shared key. It is characterized by.
図1は、一実施形態に係る鍵共有システム1の構成を示す概念図である。図1において、鍵共有システム1は、管理装置(PNSP)11と非登録通信端末(nTE)13と登録通信端末(TE)14を有する。登録通信端末14はアクセス網1を介して事業者認証基盤(IMS:IP Multimedia Subsystem)12と通信する。この登録通信端末14と事業者認証基盤12間の通信の秘匿性(第三者にデータを傍受されないこと)及び完全性(データが途中で改変されないこと)は保証されている。管理装置11は事業者認証基盤12と通信するが、この通信の秘匿性及び完全性は保証されている。このことから、登録通信端末14は、事業者認証基盤12経由で管理装置11と通信するが、この通信の秘匿性及び完全性は保証される。一方、非登録通信端末13は、アクセス網2,3を介してインターネットに接続し、インターネット経由で管理装置11と通信するが、この通信の秘匿性及び完全性は保証されない。 Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a conceptual diagram showing a configuration of a
[実施例1] The registered
[Example 1]
図2において、登録通信端末(TEa)14(以下、オーナTEa14)は、グループ(PNy)のオーナ(ユーザA)の通信端末である。登録通信端末(TEb)14(以下、ユーザTEb14)は、グループ(PNy)に参加するユーザBの通信端末である。非登録通信端末(nTE)13(以下、nTE13)は、グループ(PNy)に参加したり、離脱したりするユーザの通信端末である。ここでは、nTE113、nTE213、nTE313の3台が、グループ(PNy)に参加しているユーザのものであるとする。 FIG. 2 is a first embodiment of the
In FIG. 2, a registered communication terminal (TE a ) 14 (hereinafter, owner TE a 14) is a communication terminal of the owner (user A) of the group (PN y ). The registered communication terminal (TE b ) 14 (hereinafter referred to as user TE b 14) is a communication terminal of user B participating in the group (PN y ). The unregistered communication terminal (nTE) 13 (hereinafter, nTE13) is a communication terminal of a user who joins or leaves the group (PN y ). Here, it is assumed that three units of
ユーザTEb14は、nTE113がグループから離脱する場合に、グループ(PNy)に残留するnTE213、nTE313のみの端末個別情報を用いて暗号化用情報を更新する。ユーザTEb14は、該更新された暗号化用情報を用いてPN内共有鍵(KPNy)を暗号化する。ユーザTEb14は、該暗号化により得られた暗号化共有鍵情報をPNSP11へ送信し、PNSP11に記憶される暗号化共有鍵情報を更新させる。 Here, it is assumed that any one of
When the
オーナTEa14は、グループ(PNy)のPN内共有鍵(KPNy)を生成し、メモリに保存する。
ユーザTEb14は、以下の値(1)から(7)までを生成し、メモリに保存する。これらの値(1)から(7)は、全てのグループ(PN)で共通である。
なお、以下、aのxi乗をax(i)のように添え字を括弧内にいれて表記する(つまり、ax(i)=aのxi乗)。 [Preparation stage]
The
The
In the following, the subscript denoted been had in parentheses as a x (i) raised to the power x i of a (i.e., multiplication x i of a x (i) = a) .
図3は、実施例1に係る通信端末代理登録段階の処理手順を示すシーケンスチャートである。以下、図3を参照して通信端末代理登録段階を説明する。 [Communication terminal proxy registration stage]
FIG. 3 is a sequence chart illustrating a processing procedure in a communication terminal proxy registration stage according to the first embodiment. Hereinafter, the communication terminal proxy registration stage will be described with reference to FIG.
図4は、実施例1に係るユーザ利用登録段階の処理手順を示すシーケンスチャートである。以下、図4を参照してユーザ利用登録段階を説明する。
ステップB1:ユーザTEb14は、グループ(PNy)への参加要求をオーナTEa14へ送信する。このとき、ユーザTEb14のID(IMPUTE,b)を一緒にオーナTEa14へ送信する。
ステップB2:オーナTEa14は、ユーザBの参加を許可する場合、PN内共有鍵(KPNy)をユーザTEb14へ送信する。ユーザTEb14は、PN内共有鍵(KPNy)をメモリに保存する。 [User usage registration stage]
FIG. 4 is a sequence chart illustrating a processing procedure in a user usage registration stage according to the first embodiment. Hereinafter, the user use registration stage will be described with reference to FIG.
Step B1: The
Step B2: When the
図5は、実施例1に係る通信端末追加段階の処理手順を示すシーケンスチャートである。以下、図5を参照して通信端末追加段階を説明する。
ステップC1:ユーザTEb14は、グループ(PNy)にnTEz13を追加する場合、PN内共有鍵(KPNy)及び「s'b,z、d、Ab」を用いて、暗号化用情報(λb,y)及び暗号化共有鍵情報(Cb,y=(gα,b,y, gβ,b,y, cb,y))を次式により算出する。 [Communication terminal addition stage]
FIG. 5 is a sequence chart illustrating a processing procedure in a communication terminal addition stage according to the first embodiment. Hereinafter, the communication terminal addition stage will be described with reference to FIG.
Step C1: When the
図6は、実施例1に係る共有鍵復元段階の処理手順を示すシーケンスチャートである。以下、図6を参照して共有鍵復元段階を説明する。
ステップD1:nTEz13は、グループ(PNy)のサービス開始を要求するメッセージをPNSP11に送信する。このとき、ID(IMPUnTE,b,z)を該メッセージに付加する。
ステップD2:PNSP11は、nTEz13からの要求に応じて、暗号化共有鍵情報(Cb,y=(gα,b,y, gβ,b,y, cb,y))をnTEz13へ送信する。
なお、nTEz13とPNSP11間の通信は、共有鍵(KnTE,b,z)により秘匿性、完全性を保つことができる。 [Shared key recovery stage]
FIG. 6 is a sequence chart illustrating the processing procedure of the shared key restoration stage according to the first embodiment. Hereinafter, the shared key restoration step will be described with reference to FIG.
Step D1: nTE z 13 transmits a message requesting service start of the group (PN y ) to PNSP 11. At this time, ID (IMPU nTE, b, z ) is added to the message.
Step D2: In response to the request from the
The communication between
図7は、実施例1に係る通信端末離脱段階の処理手順を示すシーケンスチャートである。以下、図7を参照して通信端末離脱段階を説明する。
ステップE1:ユーザTEb14は、nTEz13がグループ(PNy)から離脱する場合、PN内共有鍵(KPNy)、暗号化用情報(λb,y)及び「s'b,z、d、Ab」を用いて、暗号化用情報(λb,y)及び暗号化共有鍵情報(Cb,y=(gα,b,y, gβ,b,y, cb,y))を次式により算出し更新する。 [Communication terminal withdrawal stage]
FIG. 7 is a sequence chart illustrating the processing procedure of the communication terminal leaving stage according to the first embodiment. Hereinafter, the communication terminal leaving stage will be described with reference to FIG.
Step E1: When the
図8は、実施例1に係るユーザ離脱段階の処理手順を示すシーケンスチャートである。以下、図8を参照してユーザ離脱段階を説明する。
ステップF1:オーナTEa14は、グループ(PNy)から離脱させるユーザTEb14に係る暗号化共有鍵情報(Cb,y)の削除を要求するメッセージをPNSP11へ送信する。
ステップF2:PNSP11は、該削除要求に応じて、ユーザTEb14に係る暗号化共有鍵情報(Cb,y)を削除する。
ステップF3:PNSP11は、ユーザTEb14に係る暗号化共有鍵情報(Cb,y)を削除したことを通知するメッセージをオーナTEa14へ送信する。 [User exit stage]
FIG. 8 is a sequence chart illustrating the processing procedure of the user leaving stage according to the first embodiment. Hereinafter, the user leaving stage will be described with reference to FIG.
Step F1: The
Step F2: The
Step F3: The
[実施例2] The above is the description of the first embodiment.
[Example 2]
図9において、オーナTEa14は、グループ(PNy)のオーナ(ユーザA)の通信端末である。ユーザTEb14は、グループ(PNy)に参加するユーザBの通信端末である。nTE13は、グループ(PNy)に参加したり、離脱したりするユーザの通信端末である。ここでは、nTE113、nTE213、nTE313の3台が、グループ(PNy)に参加しているユーザのものであるとする。 FIG. 9 shows a second embodiment of the
In FIG. 9,
ユーザTEb14は、nTE113がグループから離脱する場合に、グループ(PNy)に残留するnTE213、nTE313のみの端末個別情報を用いて暗号化用情報を更新する。ユーザTEb14は、該更新された暗号化用情報を用いて分散鍵2(Ub,y)を暗号化する。ユーザTEb14は、該暗号化により得られた暗号化分散鍵情報をPNSP11へ送信し、PNSP11に記憶される暗号化分散鍵情報を更新させる。 Here, it is assumed that any one of
When the
実施例1と同様であり、説明を省略する。
[通信端末代理登録段階]
実施例1と同様であり、説明を省略する。 [Preparation stage]
This is the same as the first embodiment, and the description is omitted.
[Communication terminal proxy registration stage]
This is the same as the first embodiment, and the description is omitted.
図10は、実施例2に係るユーザ利用登録段階の処理手順を示すシーケンスチャートである。以下、図10を参照してユーザ利用登録段階を説明する。
ステップB11:ユーザTEb14は、グループ(PNy)への参加要求をオーナTEa14へ送信する。このとき、ユーザTEb14のID(IMPUTE,b)を一緒にオーナTEa14へ送信する。
ステップB12:オーナTEa14は、ユーザBの参加を許可する場合、PN内共有鍵(KPNy)を用いて、分散鍵1(Sb,y)及び分散鍵2(Ub,y)を次式により算出する。 [User usage registration stage]
FIG. 10 is a sequence chart illustrating a processing procedure in a user usage registration stage according to the second embodiment. Hereinafter, the user use registration stage will be described with reference to FIG.
Step B11: The
Step B12: When the
ステップB14:オーナTEa14は、分散鍵2(Ub,y)をユーザTEb14へ送信する。ユーザTEb14は、分散鍵2(Ub,y)をメモリに保存する。 Step B13: The
Step B14: The
図11は、実施例2に係る通信端末追加段階の処理手順を示すシーケンスチャートである。以下、図11を参照して通信端末追加段階を説明する。
ステップC11:ユーザTEb14は、グループ(PNy)にnTEz13を追加する場合、分散鍵2(Ub,y)及び「s'b,z、d、Ab」を用いて、暗号化用情報(λb,y)及び暗号化分散鍵情報(Cb,y=(gα,b,y, gβ,b,y, cb,y))を次式により算出する。 [Communication terminal addition stage]
FIG. 11 is a sequence chart illustrating a processing procedure in a communication terminal addition stage according to the second embodiment. Hereinafter, the communication terminal addition stage will be described with reference to FIG.
Step C11: When the
図12は、実施例2に係る共有鍵復元段階の処理手順を示すシーケンスチャートである。以下、図12を参照して共有鍵復元段階を説明する。
ステップD11:nTEz13は、グループ(PNy)のサービス開始を要求するメッセージをPNSP11に送信する。このとき、ID(IMPUnTE,b,z)を該メッセージに付加する。
ステップD12:PNSP11は、nTEz13からの要求に応じて、暗号化分散鍵情報(Cb,y=(gα,b,y, gβ,b,y, cb,y))及び分散鍵1(Sb,y)をnTEz13へ送信する。
なお、nTEz13とPNSP11間の通信は、共有鍵(KnTE,b,z)により秘匿性、完全性を保つことができる。 [Shared key recovery stage]
FIG. 12 is a sequence chart illustrating a processing procedure in a shared key restoration stage according to the second embodiment. Hereinafter, the shared key restoration step will be described with reference to FIG.
Step D11: The
Step D12: The
The communication between
図13は、実施例2に係る通信端末離脱段階の処理手順を示すシーケンスチャートである。以下、図13を参照して通信端末離脱段階を説明する。
ステップE11:ユーザTEb14は、nTEz13がグループ(PNy)から離脱する場合、分散鍵更新情報(ΔUb,y、ΔSb,y)を次式により算出する。 [Communication terminal withdrawal stage]
FIG. 13 is a sequence chart illustrating a processing procedure of a communication terminal leaving stage according to the second embodiment. Hereinafter, the communication terminal leaving stage will be described with reference to FIG.
Step E11: user TE b 14, when
ステップE14:PNSP11は、ユーザTEb14から受信した分散鍵更新情報(ΔSb,y)を用いて、自身で保持する分散鍵1(Sb,y)を分散鍵1(S’b,y)に次式により更新する。 Step E13: The
Step E14: The
図14は、実施例2に係るユーザ離脱段階の処理手順を示すシーケンスチャートである。以下、図14を参照してユーザ離脱段階を説明する。
ステップF11:オーナTEa14は、グループ(PNy)から離脱させるユーザTEb14に係る暗号化分散鍵情報(Cb,y)及び分散鍵1(Sb,y)の削除を要求するメッセージをPNSP11へ送信する。
ステップF12:PNSP11は、該削除要求に応じて、ユーザTEb14に係る暗号化分散鍵情報(Cb,y)及び分散鍵1(Sb,y)を削除する。
ステップF13:PNSP11は、ユーザTEb14に係る暗号化分散鍵情報(Cb,y)及び分散鍵1(Sb,y)を削除したことを通知するメッセージをオーナTEa14へ送信する。 [User withdrawal stage]
FIG. 14 is a sequence chart illustrating the procedure of the user leaving stage according to the second embodiment. Hereinafter, the user leaving stage will be described with reference to FIG.
Step F11: The
Step F12: The
Step F13: The
図15は、実施例2に係る共有鍵更新段階の処理手順を示すシーケンスチャートである。以下、図15を参照して共有鍵更新段階を説明する。
ステップG11:オーナTEa14は、グループ(PNy)のPN内共有鍵(KPNy* (∈Zk))を新たにランダムに生成してメモリに保存する。
ステップG12:オーナTEa14は、共有鍵更新情報(S* a,y)を次式により算出する。 [Shared key update stage]
FIG. 15 is a sequence chart illustrating a processing procedure in a shared key update stage according to the second embodiment. Hereinafter, the shared key update stage will be described with reference to FIG.
Step G11: The
Step G12: The
ステップG14:PNSP11は、オーナTEa14から受信した共有鍵更新情報(S* a,y)を用いて、自身で保持している分散鍵1(Sb,y)を次式により更新する。 Step G13: The
Step G14: The
[実施例3] The above is the description of the second embodiment.
[Example 3]
オーナTEa14は、グループ(PNy)へのユーザBの参加を許可する場合、乱数(rb,y(∈Zk))を生成し、PN内共有鍵(KPNy)に係る分散鍵1(Sb,y)及び分散鍵2(Ub,y)を次式により算出する。 [User usage registration stage]
When the
nTEz13は、PNSP11から受信した暗号化分散鍵情報(Cb,y)と自身で保存している端末用鍵情報(kb,z)を用いて分散鍵2(Ub,y)を復元し、PNSP11から受信した分散鍵1(Sb,y)と該分散鍵2(Ub,y)を用いてPN内共有鍵(KPNy)を次式により復元する。 [Shared key recovery stage]
The
ユーザTEb14は、nTEz13がグループ(PNy)から離脱する場合、分散鍵更新情報(ΔUb,y、ΔSb,y)を次式により算出する。また、ユーザTEb14は、自身で保持する分散鍵2(Ub,y)を分散鍵2(U’b,y)に次式により更新する。また、PNSP11は、自身で保持する分散鍵1(Sb,y)を分散鍵1(S’b,y)に次式により更新する。 [Communication terminal withdrawal stage]
When the
オーナTEa14は、グループ(PNy)のPN内共有鍵(KPNy* (∈Zk))を新たにランダムに生成し、共有鍵更新情報(S* a,y)を次式により算出する。 [Shared key update stage]
The
TEX:ユーザxの携帯電話(第1の通信端末、登録通信端末)
TEowner:オーナの携帯電話(第3の通信端末、登録通信端末)
PNy:グループy
nTEz:デバイスz(第2の通信端末、非登録通信端末)
IMS:事業者認証基盤(IP Multimedia Subsystem)
PNSP:グループ鍵管理装置(管理装置)
IMPUnTE,x,z:ユーザxが利用するnTEzのIMS用ID(IMPU:IP Multimedia Public Identity)
KnTE,x,z:ユーザxが利用するnTEzとPNSPの共有鍵(第2の共有鍵)
KPN,y:PNy内のグループ内共有鍵(グループ内で利用される鍵、グループ用鍵)、l = | KPN,y |
Ix,z:ユーザxのnTEz用の端末個別情報
kx,z:ユーザxのnTEz用の端末用鍵情報
Kx,y:ユーザxのPNy内の共有鍵の暗号化用情報
Cx,y:ユーザxのPNy用の暗号化共有鍵情報
E(k, x):暗号化用情報kでxを暗号化
D(k, c):端末用鍵情報kでcを復号化
[実施例4] Next, the fourth to ninth embodiments obtained by modifying the first embodiment will be sequentially described. In Examples 4 to 9, the following notation is used.
TE X : User x's mobile phone (first communication terminal, registered communication terminal)
TE owner : Owner's mobile phone (third communication terminal, registered communication terminal)
PN y : Group y
nTE z : Device z (second communication terminal, unregistered communication terminal)
IMS: Provider Authentication Platform (IP Multimedia Subsystem)
PNSP: Group key management device (management device)
IMPU nTE, x, z : IMS ID of nTE z used by user x (IMPU: IP Multimedia Public Identity)
K nTE, x, z : Shared key of nTE z and PNSP used by user x (second shared key)
K PN, y : In-group shared key in PN y (key used in group, group key), l = | K PN, y |
I x, z : Terminal individual information for user x for nTE z k x, z : Key information for terminal for nTE z of user x K x, y : Information for encryption of shared key in PN y of user x C x, y : Encryption shared key information for PN y of user x E (k, x): Encrypt x with encryption information k D (k, c): Decrypt c with terminal key information k [Example 4]
図18は、実施例4に係る準備段階のシーケンスチャートである。図18において、第3の通信端末(オーナの携帯電話、TEowner)は、グループ(PNy)のグループ内共有鍵(KPN,y)を生成し(ステップA1)、管理装置(PNSP)へ送信する(ステップA2)。第1の通信端末(ユーザの携帯電話、TEa)は、端末個別情報(Ia,z( z = 1, …, NnTE:NnTEはユーザが利用できるデバイスの上限数)を生成し、端末個別情報(Ia,z )から端末用鍵情報(ka,z)を生成する(ステップA3)。第1の通信端末(ユーザの携帯電話、TEa)は、端末用鍵情報(ka,z)を第2の通信端末(デバイス、nTEz)へ送信する(ステップB1)。 [Preparation stage]
FIG. 18 is a sequence chart of a preparation stage according to the fourth embodiment. In FIG. 18, the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key (K PN, y ) for the group (PN y ) (step A1), and sends it to the management device (PNSP). Transmit (step A2). The first communication terminal (user's mobile phone, TE a ) generates terminal individual information (I a, z (z = 1,..., N nTE : N nTE is the upper limit number of devices available to the user), The terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A3) The first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
図19は、実施例4に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図19において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、更新したグループ内共有鍵(K* PN,y)を管理装置(PNSP)へ送信する(ステップC4)。管理装置(PNSP)は、各グループメンバに対応する暗号化用情報(kall,y)を用いて、更新されたグループ内共有鍵(K* PN,y)を暗号化し、暗号化共有鍵情報(Call,y)を「C* all,y = E(Kall,y, K* PN,y)」に更新する(ステップC5)。 [User usage registration stage]
FIG. 19 is a sequence chart of the user usage registration stage according to the fourth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 19, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3). If the third communication terminal (owner's mobile phone, TE owner ) permits the participation, the third communication terminal transmits the updated intra-group shared key (K * PN, y ) to the management device (PNSP) (step C4). The management device (PNSP) encrypts the updated in-group shared key (K * PN, y ) using the encryption information (k all, y ) corresponding to each group member, and encrypts shared key information (C all, y ) is updated to “C * all, y = E (K all, y , K * PN, y )” (step C5).
図20は、実施例4に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図20において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD3)。第3の通信端末(オーナの携帯電話、TEowner)は、更新したグループ内共有鍵(K* PN,y)を管理装置(PNSP)へ送信する(ステップD4)。 [Device addition stage]
FIG. 20 is a sequence chart of a device addition stage according to the fourth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 20, the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) by adding the second communication terminal (device, nTE z ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3). The third communication terminal (owner's mobile phone, TE owner ) transmits the updated in-group shared key (K * PN, y ) to the management device (PNSP) (step D4).
図21は、実施例4に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図21において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF3)。第3の通信端末(オーナの携帯電話、TEowner)は、更新したグループ内共有鍵(K* PN,y)を管理装置(PNSP)へ送信する(ステップF4)。 [Device release stage]
FIG. 21 is a sequence chart of a device detachment stage according to the fourth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 21, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3). The third communication terminal (owner's mobile phone, TE owner ) transmits the updated intra-group shared key (K * PN, y ) to the management device (PNSP) (step F4).
図22は、実施例4に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図21において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化共有鍵情報(Ca,y)の削除を要求し、且つ、更新したグループ内共有鍵(K* PN,y)を送信する(ステップG3)。 [User withdrawal stage]
FIG. 22 is a sequence chart of the user departure stage according to the fourth embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 21, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) information on (C a, y) requests deletion of (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2). The third communication terminal (owner's mobile phone, TE owner ) sends the encrypted shared key information (C a, y ) regarding the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And delete the updated in-group shared key (K * PN, y ) (step G3).
[実施例5] The above is the description of the fourth embodiment.
[Example 5]
図25は、実施例5に係る準備段階のシーケンスチャートである。図25において、第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ(PNy)のグループ内共有鍵(KPN,y)の生成を要求する(ステップA1)。管理装置(PNSP)は、グループ(PNy)のグループ内共有鍵(KPN,y)を生成する(ステップA2)。第1の通信端末(ユーザの携帯電話、TEa)は、端末個別情報(Ia,z( z = 1, …, NnTE:NnTEはユーザが利用できるデバイスの上限数)を生成し、端末個別情報(Ia,z )から端末用鍵情報(ka,z)を生成する(ステップA3)。第1の通信端末(ユーザの携帯電話、TEa)は、端末用鍵情報(ka,z)を第2の通信端末(デバイス、nTEz)へ送信する(ステップB1)。 [Preparation stage]
FIG. 25 is a sequence chart of a preparation stage according to the fifth embodiment. In FIG. 25, the third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to generate the group shared key (K PN, y ) of the group (PN y ) ( Step A1). The management device (PNSP) generates an intra-group shared key (K PN, y ) for the group (PN y ) (step A2). The first communication terminal (user's mobile phone, TE a ) generates terminal individual information (I a, z (z = 1,..., N nTE : N nTE is the upper limit number of devices available to the user), The terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A3) The first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
図26は、実施例5に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図26において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、管理装置(PNSP)に対し、グループ内共有鍵の更新を要求する(ステップC3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップC4)。管理装置(PNSP)は、各グループメンバに対応する暗号化用情報(kall,y)を用いて、更新されたグループ内共有鍵(K* PN,y)を暗号化し、暗号化共有鍵情報(Call,y)を「C* all,y = E(Kall,y, K* PN,y)」に更新する(ステップC5)。 [User usage registration stage]
FIG. 26 is a sequence chart of the user usage registration stage according to the fifth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 26, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2). When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the third communication terminal requests the management device (PNSP) to update the intra-group shared key (step C3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step C4). The management device (PNSP) encrypts the updated in-group shared key (K * PN, y ) using the encryption information (k all, y ) corresponding to each group member, and encrypts shared key information (C all, y ) is updated to “C * all, y = E (K all, y , K * PN, y )” (step C5).
図27は、実施例5に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図27において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップD3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD4)。 [Device addition stage]
FIG. 27 is a sequence chart of a device addition stage according to the fifth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 27, the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) by adding the second communication terminal (device, nTE z ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4).
図28は、実施例5に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図28において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップF3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF4)。 [Device release stage]
FIG. 28 is a sequence chart of a device detachment stage according to the fifth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 28, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4).
図29は、実施例5に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図29において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化共有鍵情報(Ca,y)の削除を要求し、且つ、グループ内共有鍵(KPN,y)の更新を要求する(ステップG2)。 [User exit stage]
FIG. 29 is a sequence chart of the user departure stage according to the fifth embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 29, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) information on (C a, y) requests deletion of (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) sends encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And the update of the in-group shared key (K PN, y ) are requested (step G2).
[実施例6] The above is the description of the fifth embodiment.
[Example 6]
実施例6に係る準備段階は、図25に示す実施例5と同じである。 [Preparation stage]
The preparation stage according to the sixth embodiment is the same as that of the fifth embodiment shown in FIG.
図32は、実施例6に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図32において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、管理装置(PNSP)に対し、グループ内共有鍵の更新を要求する(ステップC3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップC4)。 [User usage registration stage]
FIG. 32 is a sequence chart of the user usage registration stage according to the sixth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 32, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2). When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the third communication terminal requests the management device (PNSP) to update the intra-group shared key (step C3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step C4).
図33は、実施例6に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図33において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップD3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD4)。管理装置(PNSP)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、更新したグループ内共有鍵(K* PN,y)を送信する(ステップD5)。 [Device addition stage]
FIG. 33 is a sequence chart of a device addition stage according to the sixth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 33, the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) as the second communication terminal (device, nTE z ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4). The management device (PNSP) updates the updated intra-group shared key to the first communication terminal (user's mobile phone, TE a ) and the first communication terminal (user's mobile phone, TE all ) of other group members. (K * PN, y ) is transmitted (step D5).
図34は、実施例6に係る共有鍵復元段階のシーケンスチャートである。これは、第2の通信端末(デバイス、nTEz)がグループ内で実際にサービスを享受する際にグループ内共有鍵を復元するときに行う段階である。図34において、第2の通信端末(デバイス、nTEz)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、グループ(PNy)のサービス開始(暗号化共有鍵)を要求する(ステップE1)。第1の通信端末(ユーザの携帯電話、TEa)は、サービス開始要求元の第2の通信端末(デバイス、nTEz)に対し、グループ(PNy)の当該デバイスに該当する暗号化共有鍵情報(Ca,y)を送信する(ステップE2)。第2の通信端末(デバイス、nTEz)は、暗号化共有鍵情報(Ca,y)と端末用鍵情報(ka,z)とを用いて、グループ内共有鍵(KPN,y = D(ka,z, Ca,y))を復元する。 [Shared key recovery stage]
FIG. 34 is a sequence chart of the shared key restoration stage according to the sixth embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group. In FIG. 34, the second communication terminal (device, nTE z ) requests the service start (encrypted shared key) of the group (PN y ) from the first communication terminal (user's mobile phone, TE a ). (Step E1). The first communication terminal (user's mobile phone, TE a ) transmits an encrypted shared key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source. Information (C a, y ) is transmitted (step E2). The second communication terminal (device, nTE z ) uses the encrypted shared key information (C a, y ) and the terminal key information (k a, z ), and the intra-group shared key (K PN, y = D (ka , z , C a, y )) is restored.
図35は、実施例6に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図35において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップF3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF4)。管理装置(PNSP)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、更新したグループ内共有鍵(K* PN,y)を送信する(ステップF5)。 [Device release stage]
FIG. 35 is a sequence chart of a device detachment stage according to the sixth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 35, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4). The management device (PNSP) updates the updated intra-group shared key to the first communication terminal (user's mobile phone, TE a ) and the first communication terminal (user's mobile phone, TE all ) of other group members. (K * PN, y ) is transmitted (step F5).
図36は、実施例6に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図36において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、第1の通信端末(ユーザの携帯電話、TEa)のグループ離脱を通知し、且つ、グループ内共有鍵(KPN,y)の更新を要求する(ステップG2)。 [User exit stage]
FIG. 36 is a sequence chart of the user departure stage according to the sixth embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 36, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) information on (C a, y) requests deletion of (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) notifies the management device (PNSP) that the first communication terminal (user's mobile phone, TE a ) has left the group and is shared within the group. An update of the key (K PN, y ) is requested (step G2).
[実施例7] The above is the description of the sixth embodiment.
[Example 7]
図39は、実施例7に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図39において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、各グループメンバに対応する暗号化用情報(kall,y)を用いて、更新されたグループ内共有鍵(K* PN,y)を暗号化し、暗号化共有鍵情報(Call,y)を「C* all,y = E(Kall,y, K* PN,y)」に更新する(ステップC4)。 [User usage registration stage]
FIG. 39 is a sequence chart of the user usage registration stage according to the seventh embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 39, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3). When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the updated intra-group shared key (k all, y ) is used using the encryption information (k all, y ) corresponding to each group member. K * PN, y ) is encrypted, and the encrypted shared key information (C all, y ) is updated to “C * all, y = E (K all, y , K * PN, y )” (step C4). .
図40は、実施例7に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図40において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD3)。 [Device addition stage]
FIG. 40 is a sequence chart of a device addition stage according to the seventh embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 40, the first communication terminal (user's mobile phone, TE a ) adds the second communication terminal (device, nTE z ) to the third communication terminal (owner's mobile phone, TE owner ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
図41は、実施例7に係る共有鍵復元段階のシーケンスチャートである。これは、第2の通信端末(デバイス、nTEz)がグループ内で実際にサービスを享受する際にグループ内共有鍵を復元するときに行う段階である。図41において、第2の通信端末(デバイス、nTEz)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)のサービス開始(暗号化共有鍵)を要求する(ステップE1)。第3の通信端末(オーナの携帯電話、TEowner)は、サービス開始要求元の第2の通信端末(デバイス、nTEz)に対し、グループ(PNy)の当該デバイスに該当する暗号化共有鍵情報(Ca,y)を送信する(ステップE2)。第2の通信端末(デバイス、nTEz)は、暗号化共有鍵情報(Ca,y)と端末用鍵情報(ka,z)とを用いて、グループ内共有鍵(KPN,y = D(ka,z, Ca,y))を復元する。 [Shared key recovery stage]
FIG. 41 is a sequence chart of the shared key restoration stage according to the seventh embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group. In FIG. 41, the second communication terminal (device, nTE z ) requests the third communication terminal (owner's mobile phone, TE owner ) to start the service (encrypted shared key) of the group (PN y ). (Step E1). The third communication terminal (owner's mobile phone, TE owner ) transmits the encrypted shared key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source. Information (C a, y ) is transmitted (step E2). The second communication terminal (device, nTE z ) uses the encrypted shared key information (C a, y ) and the terminal key information (k a, z ), and the intra-group shared key (K PN, y = D (ka , z , C a, y )) is restored.
図42は、実施例7に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図42において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF3)。 [Device release stage]
FIG. 42 is a sequence chart of a device leave stage according to the seventh embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 42, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
図43は、実施例7に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図43において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化共有鍵情報(Ca,y)を削除する(ステップG3)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(K* PN,y)と、グループメンバの各々に対応する暗号化用情報(Kall,y)とを用いて、暗号化共有鍵情報「C* all,y = E(Kall,y, K* PN,y)」を生成し更新する(ステップG4)。 [User exit stage]
FIG. 43 is a sequence chart of the user departure stage according to the seventh embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 43, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) Is requested to delete information (C a, y ) (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2). The third communication terminal (owner's mobile phone, TE owner ) deletes the encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) (step G3). The third communication terminal (owner's mobile phone, TE owner ) uses the intra-group shared key (K * PN, y ) and the encryption information (K all, y ) corresponding to each group member. Then, the encrypted shared key information “C * all, y = E ( Kall, y , K * PN, y )” is generated and updated (step G4).
[実施例8] The above is the description of the seventh embodiment.
[Example 8]
図46は、実施例8に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図46において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、第1の通信端末(ユーザの携帯電話、TEa)に対し、更新したグループ内共有鍵(K* PN,y)を送信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、更新したグループ内共有鍵(K* PN,y)を送信する(ステップC4)。他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)は、暗号化用情報(kall,y)を用いてグループ内共有鍵(K* PN,y)を暗号化し、暗号化共有鍵情報(Call,y)を「C* all,y = E(Kall,y, K* PN,y)」に更新する(ステップC5)。 [User usage registration stage]
FIG. 46 is a sequence chart of the user usage registration stage according to the eighth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 46, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2). When the third communication terminal (owner's mobile phone, TE owner ) permits the participation, the updated intra-group shared key (K * PN, ) is sent to the first communication terminal (user's mobile phone, TE a ) . y ) is transmitted (step C3). When the third communication terminal (owner's mobile phone, TE owner ) permits the participation, the updated intra-group shared key is sent to the first communication terminal (user's mobile phone, TE all ) of the other group members. (K * PN, y ) is transmitted (step C4). The first communication terminal of the other group member (user's mobile phone, TE all ) encrypts the intra-group shared key (K * PN, y ) using the encryption information (k all, y ) and Shared key information (C all, y ) is updated to “C * all, y = E (K all, y , K * PN, y )” (step C5).
図47は、実施例8に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図47において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、更新したグループ内共有鍵(K* PN,y)を送信する(ステップD3)。 [Device addition stage]
FIG. 47 is a sequence chart of a device addition stage according to Embodiment 8. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 47, the first communication terminal (user's mobile phone, TE a ) adds the second communication terminal (device, nTE z ) to the third communication terminal (owner's mobile phone, TE owner ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2). The third communication terminal (owner's mobile phone, TE owner ) includes the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). In response, the updated intra-group shared key (K * PN, y ) is transmitted (step D3).
実施例8に係る共有鍵復元段階は、図34に示す実施例6と同じである。 [Shared key recovery stage]
The shared key restoration stage according to the eighth embodiment is the same as that of the sixth embodiment shown in FIG.
図48は、実施例8に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図48において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、更新したグループ内共有鍵(K* PN,y)を送信する(ステップF3)。 [Device release stage]
FIG. 48 is a sequence chart of a device leave stage according to the eighth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 48, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2). The third communication terminal (owner's mobile phone, TE owner ) includes the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). In response, the updated intra-group shared key (K * PN, y ) is transmitted (step F3).
図49は、実施例8に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図49において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)をグループリストから削除し、グループリストを更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG3)。 [User exit stage]
FIG. 49 is a sequence chart of the user departure stage according to the eighth embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 49, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) Is requested to delete information (C a, y ) (step G1). The third communication terminal (owner's mobile phone, TE owner ) deletes the first communication terminal (user's mobile phone, TE a ) from the group list, and updates the group list (step G2). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G3).
[実施例9] The above is the description of the eighth embodiment.
[Example 9]
図52は、実施例9に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図52において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、各グループメンバに対応する暗号化用情報(kall,y)を用いて、更新されたグループ内共有鍵(K* PN,y)を暗号化し、暗号化共有鍵情報(Call,y)を「C* all,y = E(Kall,y, K* PN,y)」に更新する(ステップC4)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、更新された暗号化共有鍵情報(C* all,y)を送信する(ステップC5)。 [User usage registration stage]
FIG. 52 is a sequence chart of the user usage registration stage according to the ninth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 52, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ” (step C2). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3). When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the updated intra-group shared key (k all, y ) is used using the encryption information (k all, y ) corresponding to each group member. K * PN, y ) is encrypted, and the encrypted shared key information (C all, y ) is updated to “C * all, y = E (K all, y , K * PN, y )” (step C4). . The third communication terminal (owner's mobile phone, TE owner ) transmits the updated encrypted shared key information (C * all, y ) to the management apparatus (PNSP) (step C5).
図53は、実施例9に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図53において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD3)。 [Device addition stage]
FIG. 53 is a sequence chart of a device addition stage according to Embodiment 9. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 53, the first communication terminal (user's mobile phone, TE a ) adds the second communication terminal (device, nTE z ) to the third communication terminal (owner's mobile phone, TE owner ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
図54は、実施例9に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図54において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF3)。 [Device release stage]
FIG. 54 is a sequence chart of a device leave stage according to the ninth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 54, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
図55は、実施例9に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図55において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化共有鍵情報(Ca,y)を削除する(ステップG3)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(K* PN,y)と、グループメンバの各々に対応する暗号化用情報(Kall,y)とを用いて、暗号化共有鍵情報「C* all,y = E(Kall,y, K* PN,y)」を生成し更新する(ステップG4)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、更新された暗号化共有鍵情報(C* all,y」を送信し、且つ、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化共有鍵情報(Ca,y)の削除を要求する(ステップG5)。管理装置(PNSP)は、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化共有鍵情報(Ca,y)を削除する。 [User exit stage]
FIG. 55 is a sequence chart of the user departure stage according to the ninth embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 55, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) Is requested to delete information (C a, y ) (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2). The third communication terminal (owner's mobile phone, TE owner ) deletes the encrypted shared key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) (step G3). The third communication terminal (owner's mobile phone, TE owner ) uses the intra-group shared key (K * PN, y ) and the encryption information (K all, y ) corresponding to each group member. Then, the encrypted shared key information “C * all, y = E ( Kall, y , K * PN, y )” is generated and updated (step G4). The third communication terminal (owner's mobile phone, TE owner ) transmits the updated encrypted shared key information (C * all, y ) to the management device (PNSP), and the first communication terminal Request for deletion of encrypted shared key information (C a, y ) related to (user's mobile phone, TE a ) (step G5) The management device (PNSP) sends the first communication terminal (user's mobile phone, TE a) The encrypted shared key information (C a, y ) related to a ) is deleted.
TEX:ユーザxの携帯電話(第1の通信端末、登録通信端末)
TEowner:オーナの携帯電話(第3の通信端末、登録通信端末)
PNy:グループy
nTEz:デバイスz(第2の通信端末、非登録通信端末)
IMS:事業者認証基盤(IP Multimedia Subsystem)
PNSP:グループ鍵管理装置(管理装置)
IMPUnTE,x,z:ユーザxが利用するnTEzのIMS用ID(IMPU:IP Multimedia Public Identity)
KnTE,x,z:ユーザxが利用するnTEzとPNSPの共有鍵(第2の共有鍵)
KPN,y:PNy内のグループ内共有鍵(グループ内で利用される鍵、グループ用鍵)、l = | KPN,y |
ΔKPN,y:更新前後のグループ内共有鍵(KPN,y)の差分
Sx,y:ユーザx用のKPN,yの第1の分散鍵
Ux,y:ユーザx用のKPN,yの第2の分散鍵
Ix,z:ユーザxのnTEz用の端末個別情報
kx,z:ユーザxのnTEz用の端末用鍵情報
Kx,y:ユーザxのPNy内の分散鍵の暗号化用情報
Cx,y:ユーザxのPNy用の暗号化分散鍵情報
E(k, x):暗号化用情報kでxを暗号化
D(k, c):端末用鍵情報kでcを復号化
Div(k):秘密情報kを2つの分散鍵に分割
Comb(x, y):分散鍵x, yを結合し、もとの秘密情報を復元
Update(x, Δk):秘密情報kの更新前後の差分Δkと、もとの秘密情報kの分散鍵xから、更新後の秘密情報k* (= k + Δk) に対応する分散鍵x*を生成(Div(k) = (x, y), Update(x, Δk) = x*とすると、Comb(x*, y) = k*)
[実施例10] Next, the tenth to fifteenth embodiments obtained by modifying the above-described second embodiment will be sequentially described. In Examples 10 to 15, the following notation is used.
TE X : User x's mobile phone (first communication terminal, registered communication terminal)
TE owner : Owner's mobile phone (third communication terminal, registered communication terminal)
PN y : Group y
nTE z : Device z (second communication terminal, unregistered communication terminal)
IMS: Provider Authentication Platform (IP Multimedia Subsystem)
PNSP: Group key management device (management device)
IMPU nTE, x, z : IMS ID of nTE z used by user x (IMPU: IP Multimedia Public Identity)
K nTE, x, z : Shared key of nTE z and PNSP used by user x (second shared key)
K PN, y : In-group shared key in PN y (key used in group, group key), l = | K PN, y |
ΔK PN, y : Difference between group shared keys (K PN, y ) before and after update S x, y : K PN, y first distributed key for user x U x, y : K PN for user x , y second distributed key I x, z : Terminal individual information for nTE z of user x k x, z : Key information for terminal of user x for nTE z K x, y : Within PN y of user x C x, y : Encryption x key distribution for PN y of user x E (k, x): Encrypt x with encryption information k D (k, c): Terminal Decrypt c with key information k Div (k): Divide secret information k into two distributed keys Comb (x, y): Combine distributed keys x and y and restore original secret information Update (x , Δk): A distributed key x * corresponding to the updated secret information k * (= k + Δk) is generated from the difference Δk before and after the update of the secret information k and the distributed key x of the original secret information k ( Div (k) = (x, y), Update (x, Δk) = x * , Comb (x * , y) = k * )
[Example 10]
図58は、実施例10に係る準備段階のシーケンスチャートである。図58において、第3の通信端末(オーナの携帯電話、TEowner)は、グループ(PNy)のグループ内共有鍵(KPN,y)を生成する(ステップA1)。第1の通信端末(ユーザの携帯電話、TEa)は、端末個別情報(Ia,z( z = 1, …, NnTE:NnTEはユーザが利用できるデバイスの上限数)を生成し、端末個別情報(Ia,z )から端末用鍵情報(ka,z)を生成する(ステップA2)。第1の通信端末(ユーザの携帯電話、TEa)は、端末用鍵情報(ka,z)を第2の通信端末(デバイス、nTEz)へ送信する(ステップB1)。 [Preparation stage]
FIG. 58 is a sequence chart of a preparation stage according to the tenth embodiment. In FIG. 58, the third communication terminal (owner's mobile phone, TE owner ) generates an intra-group shared key (K PN, y ) for the group (PN y ) (step A1). The first communication terminal (user's mobile phone, TE a ) generates terminal individual information (I a, z (z = 1,..., N nTE : N nTE is the upper limit number of devices that the user can use), The terminal key information (k a, z ) is generated from the terminal individual information (I a, z ) (step A2), and the first communication terminal (user's mobile phone, TE a ) receives the terminal key information (k a, z ) is transmitted to the second communication terminal (device, nTE z ) (step B1).
図59は、実施例10に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図59において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新し、該ユーザに対応する第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)を「(Sa,y, Ua,y) = Div(K* PN,y)」により生成する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、管理装置(PNSP)に対し、第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)並びにグループ内共有鍵の差分(ΔKPN,y)を送信する(ステップC4)。管理装置(PNSP)は、グループ内共有鍵の差分(ΔKPN,y)を用いて、他のグループメンバの各々に対応する第1の分散鍵(Sall,y)を「S* all,y = Update(Sall,y, ΔKPN,y)」に更新する(ステップC5)。 [User usage registration stage]
FIG. 59 is a sequence chart of the user usage registration stage according to the tenth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 59, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ”, and change the first distributed key (S a, y ) and second distributed key (U a, y ) corresponding to the user to “(S a, y , U a, y ) = Div (K * PN, y ) "(step C2). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3). When the third communication terminal (owner's mobile phone, TE owner ) permits participation, the first distributed key (S a, y ) and the second distributed key (U a ) are sent to the management apparatus (PNSP). , y ) and the difference (ΔK PN, y ) of the intra-group shared key (step C4). The management device (PNSP) uses the difference (ΔK PN, y ) of the intra-group shared key to assign the first distributed key (S all, y ) corresponding to each of the other group members to “S * all, y”. = Update (S all, y , ΔK PN, y ) ”(step C5).
図60は、実施例10に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図60において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD3)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップC4)。 [Device addition stage]
FIG. 60 is a sequence chart of a device addition stage according to the tenth embodiment. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 60, the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) by adding the second communication terminal (device, nTE z ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3). The third communication terminal (owner's mobile phone, TE owner ) transmits the intra-group shared key difference (ΔK PN, y ) to the management device (PNSP) (step C 4).
図61は、実施例10に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図61において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF3)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップF4)。 [Device release stage]
FIG. 61 is a sequence chart of a device detachment stage according to the tenth embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 61, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3). The third communication terminal (owner's mobile phone, TE owner ) transmits the intra-group shared key difference (ΔK PN, y ) to the management device (PNSP) (step F4).
図62は、実施例10に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図62において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化分散鍵情報(Ca,y)及び第1の分散鍵(Sa,y)の削除を要求し、且つ、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップG3)。 [User exit stage]
FIG. 62 is a sequence chart of the user departure stage according to the tenth embodiment. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 62, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) Is requested to delete information (C a, y ) (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2). The third communication terminal (owner's mobile phone, TE owner ) sends encrypted distributed key information (C a, y ) related to the first communication terminal (user's mobile phone, TE a ) to the management device (PNSP). And deletion of the first distributed key (S a, y ), and the difference (ΔK PN, y ) of the intra-group shared key is transmitted (step G3).
[実施例11] The above is the description of the tenth embodiment.
[Example 11]
図65は、実施例11に係る準備段階のシーケンスチャートである。図65において、第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ(PNy)のグループ内共有鍵(KPN,y)の生成を要求する(ステップA1)。管理装置(PNSP)は、グループ(PNy)のグループ内共有鍵(KPN,y)を生成する(ステップA2)。第1の通信端末(ユーザの携帯電話、TEa)は、端末個別情報(Ia,z( z = 1, …, NnTE:NnTEはユーザが利用できるデバイスの上限数)を生成し、端末個別情報(Ia,z )から端末用鍵情報(ka,z)を生成する(ステップA3)。第1の通信端末(ユーザの携帯電話、TEa)は、端末用鍵情報(ka,z)を第2の通信端末(デバイス、nTEz)へ送信する(ステップB1)。 [Preparation stage]
FIG. 65 is a sequence chart of a preparation stage according to
図66は、実施例11に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図66において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、管理装置(PNSP)に対し、グループ内共有鍵の更新と、第1の通信端末(ユーザの携帯電話、TEa)に対応する第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)の生成とを要求する(ステップC3)。 [User usage registration stage]
FIG. 66 is a sequence chart of the user usage registration stage according to
図67は、実施例11に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図67において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップD3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD4)。 [Device addition stage]
FIG. 67 is a sequence chart of a device addition stage according to
図68は、実施例11に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図68において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップF3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF4)。 [Device release stage]
FIG. 68 is a sequence chart of a device detachment stage according to the eleventh embodiment. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 68, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4).
図69は、実施例11に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図69において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化分散鍵情報(Ca,y)及び第1の分散鍵(Sa,y)の削除を要求し、且つ、グループ内共有鍵(KPN,y)の更新を要求する(ステップG2)。 [User exit stage]
FIG. 69 is a sequence chart of a user departure stage according to
[実施例12] The above is the description of the eleventh embodiment.
[Example 12]
実施例12に係る準備段階は、図65に示す実施例11と同じである。 [Preparation stage]
The preparation stage according to Example 12 is the same as Example 11 shown in FIG.
図72は、実施例12に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図72において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、管理装置(PNSP)に対し、グループ内共有鍵の更新と、第1の通信端末(ユーザの携帯電話、TEa)に対応する第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)の生成とを要求する(ステップC3)。 [User usage registration stage]
FIG. 72 is a sequence chart of the user usage registration stage according to the twelfth embodiment. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 72, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C2). If the third communication terminal (owner's mobile phone, TE owner ) permits participation, the management device (PNSP) updates the intra-group shared key and the first communication terminal (user's mobile phone, TE The generation of the first distributed key (S a, y ) and the second distributed key (U a, y ) corresponding to a ) is requested (step C3).
図73は、実施例12に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図73において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップD3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD4)。管理装置(PNSP)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップD5)。 [Device addition stage]
FIG. 73 is a sequence chart of a device addition stage according to Embodiment 12. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 73, the first communication terminal (user's mobile phone, TE a ) adds the second communication terminal (device, nTE z ) to the third communication terminal (owner's mobile phone, TE owner ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step D3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D4). The management device (PNSP) compares the difference between the intra-group shared keys with respect to the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). (ΔK PN, y ) is transmitted (step D5).
図74は、実施例12に係る共有鍵復元段階のシーケンスチャートである。これは、第2の通信端末(デバイス、nTEz)がグループ内で実際にサービスを享受する際にグループ内共有鍵を復元するときに行う段階である。図74において、第2の通信端末(デバイス、nTEz)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、グループ(PNy)のサービス開始(暗号化共有鍵)を要求する(ステップE1)。第1の通信端末(ユーザの携帯電話、TEa)は、サービス開始要求元の第2の通信端末(デバイス、nTEz)に対し、グループ(PNy)の当該デバイスに該当する暗号化分散鍵情報(Ca,y)及び第1の分散鍵(Sa,y)を送信する(ステップE2)。第2の通信端末(デバイス、nTEz)は、暗号化分散鍵情報(Ca,y)と端末用鍵情報(ka,z)とを用いて、グループ内共有鍵(KPN,y = Comb( D(ka,z, Ca,y), Sa,y))を復元する(ステップE3)。 [Shared key recovery stage]
FIG. 74 is a sequence chart of the shared key restoration stage according to the twelfth embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group. In FIG. 74, the second communication terminal (device, nTE z ) requests the service start (encrypted shared key) of the group (PN y ) from the first communication terminal (user's mobile phone, TE a ). (Step E1). The first communication terminal (user's mobile phone, TE a ) sends an encrypted distributed key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source. Information (C a, y ) and the first distributed key (S a, y ) are transmitted (step E2). The second communication terminal (device, nTE z ) uses the encrypted distributed key information (C a, y ) and the terminal key information (k a, z ) to use the intra-group shared key (K PN, y = Comb (D (ka , z , C a, y ), S a, y )) is restored (step E3).
図75は、実施例12に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図75において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵(KPN,y)の更新を要求する(ステップF3)。管理装置(PNSP)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF4)。管理装置(PNSP)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップF5)。 [Device release stage]
FIG. 75 is a sequence chart of a device leave stage according to Embodiment 12. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 75, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) returns to the first communication terminal (user's mobile phone, TE a ) (step F2). The third communication terminal (owner's mobile phone, TE owner ) requests the management device (PNSP) to update the intra-group shared key (K PN, y ) (step F3). The management device (PNSP) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F4). The management device (PNSP) compares the difference between the intra-group shared keys with respect to the first communication terminal (user's mobile phone, TE a ) and other group member's first communication terminals (user's mobile phone, TE all ). (ΔK PN, y ) is transmitted (step F5).
図76は、実施例12に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図76において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、第1の通信端末(ユーザの携帯電話、TEa)のグループ離脱を通知し、且つ、グループ内共有鍵(KPN,y)の更新を要求する(ステップG2)。 [User exit stage]
FIG. 76 is a sequence chart of a user leave stage according to Embodiment 12. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 76, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) information on (C a, y) requests deletion of (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) notifies the management device (PNSP) that the first communication terminal (user's mobile phone, TE a ) has left the group and is shared within the group. An update of the key (K PN, y ) is requested (step G2).
[実施例13] The above is the description of the twelfth embodiment.
[Example 13]
図79は、実施例13に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図79において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新し、該ユーザに対応する第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)を「(Sa,y, Ua,y) = Div(K* PN,y)」により生成する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、グループ内共有鍵の差分(ΔKPN,y)を用いて、他のグループメンバの各々に対応する第1の分散鍵(Sall,y)を「S* all,y = Update(Sall,y, ΔKPN,y)」に更新する(ステップC4)。 [User usage registration stage]
FIG. 79 is a sequence chart of a user usage registration stage according to
図80は、実施例13に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図80において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD3)。 [Device addition stage]
FIG. 80 is a sequence chart of a device addition stage according to
図81は、実施例13に係る共有鍵復元段階のシーケンスチャートである。これは、第2の通信端末(デバイス、nTEz)がグループ内で実際にサービスを享受する際にグループ内共有鍵を復元するときに行う段階である。図81において、第2の通信端末(デバイス、nTEz)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)のサービス開始(暗号化共有鍵)を要求する(ステップE1)。第3の通信端末(オーナの携帯電話、TEowner)は、サービス開始要求元の第2の通信端末(デバイス、nTEz)に対し、グループ(PNy)の当該デバイスに該当する暗号化分散鍵情報(Ca,y)を送信する(ステップE2)。第2の通信端末(デバイス、nTEz)は、暗号化分散鍵情報(Ca,y)と端末用鍵情報(ka,z)とを用いて、グループ内共有鍵(KPN,y = Comb( D(ka,z, Ca,y), Sa,y))を復元する(ステップE3)。 [Shared key recovery stage]
FIG. 81 is a sequence chart of the shared key restoration stage according to the thirteenth embodiment. This is a step performed when the second communication terminal (device, nTE z ) restores the intra-group shared key when actually enjoying the service within the group. In FIG. 81, the second communication terminal (device, nTE z ) requests the service start (encrypted shared key) of the group (PN y ) from the third communication terminal (owner's mobile phone, TE owner ). (Step E1). The third communication terminal (owner's mobile phone, TE owner ) transmits the encrypted distributed key corresponding to the device in the group (PN y ) to the second communication terminal (device, nTE z ) that is the service start request source. Information (C a, y ) is transmitted (step E2). The second communication terminal (device, nTE z ) uses the encrypted distributed key information (C a, y ) and the terminal key information (k a, z ) to use the intra-group shared key (K PN, y = Comb (D (ka , z , C a, y ), S a, y )) is restored (step E3).
図82は、実施例13に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図82において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF3)。 [Device release stage]
FIG. 82 is a sequence chart of a device leave stage according to
図83は、実施例13に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図83において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化分散鍵情報(Ca,y)及び第1の分散鍵(Sa,y)を削除する(ステップG3)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵の差分(ΔKPN,y)を用いて、他のグループメンバの各々に対応する第1の分散鍵(Sall,y)を「S* all,y = Update(Sall,y, ΔKPN,y)」に更新する(ステップG4)。 [User exit stage]
FIG. 83 is a sequence chart of the user departure stage according to
[実施例14] The above is the description of the thirteenth embodiment.
[Example 14]
図86は、実施例14に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図86において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新し、該ユーザに対応する第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)を「(Sa,y, Ua,y) = Div(K* PN,y)」により生成する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、第1の通信端末(ユーザの携帯電話、TEa)に対し、第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)を送信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップC4)。他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)は、グループ内共有鍵の差分(ΔKPN,y)を用いて、第1の分散鍵(Sall,y)を「S* all,y = Update(Sall,y, ΔKPN,y)」に更新する(ステップC5)。 [User usage registration stage]
FIG. 86 is a sequence chart of a user usage registration stage according to
図87は、実施例14に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図87において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップD3)。 [Device addition stage]
FIG. 87 is a sequence chart of a device addition stage according to
実施例14に係る共有鍵復元段階は、図74に示す実施例12と同じである。 [Shared key recovery stage]
The shared key restoration stage according to the fourteenth embodiment is the same as the twelfth embodiment shown in FIG.
図88は、実施例14に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図88において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)及び他のグループメンバの第1の通信端末(ユーザの携帯電話、TEall)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信する(ステップF3)。 [Device release stage]
FIG. 88 is a sequence chart of a device leave stage according to
図89は、実施例14に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図89において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)をグループリストから削除し、グループリストを更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG3)。 [User exit stage]
FIG. 89 is a sequence chart of a user departure stage according to
[実施例15] The above is the description of the fourteenth embodiment.
[Example 15]
図92は、実施例15に係るユーザ利用登録段階のシーケンスチャートである。これは、ユーザが、グループに参加するときにグループのオーナに対して利用登録を行う段階である。図92において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、グループ(PNy)への参加要求を送信する(ステップC1)。第3の通信端末(オーナの携帯電話、TEowner)は、該ユーザのグループ(PNy)への参加を許可する場合、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新し、該ユーザに対応する第1の分散鍵(Sa,y)及び第2の分散鍵(Ua,y)を「(Sa,y, Ua,y) = Div(K* PN,y)」により生成する(ステップC2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)に対し、参加許可又は参加拒否を返信する(ステップC3)。第3の通信端末(オーナの携帯電話、TEowner)は、参加を許可した場合、管理装置(PNSP)に対し、グループ内共有鍵の差分(ΔKPN,y)及び第1の分散鍵(Sa,y)を送信する(ステップC4)。管理装置(PNSP)は、グループ内共有鍵の差分(ΔKPN,y)を用いて、他のグループメンバの各々に対応する第1の分散鍵(Sall,y)を「S* all,y = Update(Sall,y, ΔKPN,y)」に更新する(ステップC5)。 [User usage registration stage]
FIG. 92 is a sequence chart of the user usage registration stage according to Embodiment 15. This is a stage in which the user performs usage registration with the group owner when joining the group. In FIG. 92, the first communication terminal (user's mobile phone, TE a ) transmits a request to join the group (PN y ) to the third communication terminal (owner's mobile phone, TE owner ) ( Step C1). When the third communication terminal (owner's mobile phone, TE owner ) permits participation in the user's group (PN y ), the in-group shared key (K PN, y ) is obtained from “K PN, y ”. Update to “K * PN, y ”, and change the first distributed key (S a, y ) and second distributed key (U a, y ) corresponding to the user to “(S a, y , U a, y ) = Div (K * PN, y ) "(step C2). The third communication terminal (owner's mobile phone, TE owner ) replies participation permission or participation refusal to the first communication terminal (user's mobile phone, TE a ) (step C3). When the third communication terminal (owner's mobile phone, TE owner ) permits the participation, the difference (ΔK PN, y ) of the intra-group shared key and the first distributed key (S a, y ) is transmitted (step C4). The management device (PNSP) uses the difference (ΔK PN, y ) of the intra-group shared key to assign the first distributed key (S all, y ) corresponding to each of the other group members to “S * all, y”. = Update (S all, y , ΔK PN, y ) ”(step C5).
図93は、実施例15に係るデバイス追加段階のシーケンスチャートである。これは、ユーザが、ユーザ利用登録後に、第2の通信端末(デバイス、nTEz)をグループに参加させるときに行う段階である。図93において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第2の通信端末(デバイス、nTEz)の追加を要求する(ステップD1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップD2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップD3)。 [Device addition stage]
FIG. 93 is a sequence chart of the device addition stage according to Embodiment 15. This is a stage that is performed when the user joins the second communication terminal (device, nTE z ) to the group after user use registration. In FIG. 93, the first communication terminal (user's mobile phone, TE a ) is added to the third communication terminal (owner's mobile phone, TE owner ) as the second communication terminal (device, nTE z ). Is requested (step D1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step D2). The third communication terminal (owner's mobile phone, TE owner ) returns a reply to the first communication terminal (user's mobile phone, TE a ) (step D3).
図94は、実施例15に係るデバイス離脱段階のシーケンスチャートである。これは、ユーザが第2の通信端末(デバイス、nTEz)をグループから離脱させるときに行う段階である。図94において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、デバイス離脱要求を送信する(ステップF1)。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップF2)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する(ステップF3)。 [Device release stage]
FIG. 94 is a sequence chart of the device removal stage according to Embodiment 15. This is a step that is performed when the user causes the second communication terminal (device, nTE z ) to leave the group. In FIG. 94, the first communication terminal (user's mobile phone, TE a ) transmits a device disconnection request to the third communication terminal (owner's mobile phone, TE owner ) (step F1). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step F2). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ) (step F3).
図95は、実施例15に係るユーザ離脱段階のシーケンスチャートである。これは、グループのオーナがユーザをグループから離脱させるときに行う段階である。図95において、第1の通信端末(ユーザの携帯電話、TEa)は、第3の通信端末(オーナの携帯電話、TEowner)に対し、第1の通信端末(ユーザの携帯電話、TEa)に関する情報(Ca,y)の削除を要求する(ステップG1)。第3の通信端末(オーナの携帯電話、TEowner)は、第1の通信端末(ユーザの携帯電話、TEa)へ返信する。第3の通信端末(オーナの携帯電話、TEowner)は、グループ内共有鍵(KPN,y)を「KPN,y」から「K* PN,y」へ更新する(ステップG2)。第3の通信端末(オーナの携帯電話、TEowner)は、管理装置(PNSP)に対し、グループ内共有鍵の差分(ΔKPN,y)を送信し、且つ、第1の通信端末(ユーザの携帯電話、TEa)に関する暗号化分散鍵情報(Ca,y)及び第1の分散鍵(Sa,y)の削除を要求する(ステップG3)。 [User exit stage]
FIG. 95 is a sequence chart of the user departure stage according to Embodiment 15. This is the stage that is performed when the group owner causes the user to leave the group. In FIG. 95, the first communication terminal (user's mobile phone, TE a ) is different from the third communication terminal (owner's mobile phone, TE owner ) with respect to the first communication terminal (user's mobile phone, TE a). ) Is requested to delete information (C a, y ) (step G1). The third communication terminal (owner's mobile phone, TE owner ) replies to the first communication terminal (user's mobile phone, TE a ). The third communication terminal (owner's mobile phone, TE owner ) updates the intra-group shared key (K PN, y ) from “K PN, y ” to “K * PN, y ” (step G2). The third communication terminal (owner's mobile phone, TE owner ) transmits the group shared key difference (ΔK PN, y ) to the management device (PNSP), and the first communication terminal (user's A request is made to delete the encrypted distributed key information (C a, y ) and the first distributed key (S a, y ) relating to the cellular phone, TE a ) (step G3).
また、「コンピュータシステム」は、WWWシステムを利用している場合であれば、ホームページ提供環境(あるいは表示環境)も含むものとする。
また、「コンピュータ読み取り可能な記録媒体」とは、フレキシブルディスク、光磁気ディスク、ROM、フラッシュメモリ等の書き込み可能な不揮発性メモリ、DVD(Digital Versatile Disk)等の可搬媒体、コンピュータシステムに内蔵されるハードディスク等の記憶装置のことをいう。 By recording a program for realizing each step in each stage of each of the above-described embodiments on a computer-readable recording medium, causing the computer system to read and execute the program recorded on the recording medium. The key sharing process may be performed. Here, the “computer system” may include an OS and hardware such as peripheral devices.
Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
“Computer-readable recording medium” means a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disk), and a built-in computer system. A storage device such as a hard disk.
また、上記プログラムは、このプログラムを記憶装置等に格納したコンピュータシステムから、伝送媒体を介して、あるいは、伝送媒体中の伝送波により他のコンピュータシステムに伝送されてもよい。ここで、プログラムを伝送する「伝送媒体」は、インターネット等のネットワーク(通信網)や電話回線等の通信回線(通信線)のように情報を伝送する機能を有する媒体のことをいう。
また、上記プログラムは、前述した機能の一部を実現するためのものであっても良い。さらに、前述した機能をコンピュータシステムにすでに記録されているプログラムとの組み合わせで実現できるもの、いわゆる差分ファイル(差分プログラム)であっても良い。 Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.
本実施形態によれば、ネットワークを介して離れて位置する複数の装置同士(例えば、ユーザの通信端末とHSS、ユーザの通信端末とアプリケーションサーバ、ユーザの通信端末と他のユーザの通信端末、など)でセキュリティの高いグループ内通信を実現するための鍵(グループ内共有鍵)を装置間で共有して、通信内容の秘匿性、完全性が保証される形で通信を行うことが可能となる。そして、ある装置が当該グループから離脱する場合に、離脱後に当該装置が、当該装置に保持する情報を用いてグループ内共有鍵を復元することができないようにすることが可能となる。これにより、グループから離脱したユーザが、当該グループ内の通信を傍受することを防止することができる。 As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.
According to the present embodiment, a plurality of devices that are located apart via a network (for example, a user communication terminal and an HSS, a user communication terminal and an application server, a user communication terminal and a communication terminal of another user, etc. ), A key for realizing highly secure intra-group communication (in-group shared key) can be shared between devices, and communication can be performed in a manner that guarantees the confidentiality and integrity of the communication contents. . When a certain device leaves the group, it is possible to prevent the device from restoring the intra-group shared key using the information held in the device after leaving. Thereby, it is possible to prevent a user who has left the group from intercepting communication within the group.
11…管理装置(PNSP)
12…事業者認証基盤(IMS)
13…非登録通信端末(nTE)
14…登録通信端末(TE) 1 ...
12 ... Business Authentication Infrastructure (IMS)
13 ... Unregistered communication terminal (nTE)
14. Registered communication terminal (TE)
Claims (19)
- 同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおいて、
前記通信端末のうちの第1の通信端末は、
前記グループ内共有鍵を記憶するグループ内共有鍵記憶手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて、前記グループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を前記管理装置へ送信する暗号化共有鍵情報送信手段と、を有し、
前記管理装置は、
前記第1の通信端末から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記受信された暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報記憶手段に記憶される暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記管理装置から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化共有鍵情報を用いて、前記グループ内共有鍵を復元する復号化手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を用いて前記グループ内共有鍵を暗号化した暗号化共有鍵情報を前記管理装置へ送信し、前記管理装置に記憶される暗号化共有鍵情報を更新させる、
ことを特徴とする鍵共有システム。 In a key sharing system having a communication terminal belonging to the same group, and a management device that holds information for sharing an intra-group shared key between the communication terminals,
The first communication terminal among the communication terminals is:
An intra-group shared key storage means for storing the intra-group shared key;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
An encryption means for encrypting the intra-group shared key using the encryption information;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information obtained by the encryption to the management device,
The management device
Encrypted shared key information receiving means for receiving encrypted shared key information from the first communication terminal;
Encrypted shared key information storage means for storing the received encrypted shared key information;
Encrypted shared key information transmitting means for transmitting encrypted shared key information stored in the encrypted shared key information storage means to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted shared key information receiving means for receiving encrypted shared key information from the management device;
Decrypting means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the encryption information using terminal individual information of only the second communication terminal remaining in the group. The encrypted shared key information obtained by encrypting the intra-group shared key using the updated encryption information is transmitted to the management apparatus, and the encrypted shared key information stored in the management apparatus is updated. ,
A key sharing system characterized by this. - 同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおける、前記通信端末(第1の通信端末)であり、
前記グループ内共有鍵を記憶するグループ内共有鍵記憶手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて、前記グループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を前記管理装置へ送信する暗号化共有鍵情報送信手段と、を有し、
前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を用いて前記グループ内共有鍵を暗号化した暗号化共有鍵情報を前記管理装置へ送信し、前記管理装置に記憶される暗号化共有鍵情報を更新させる、
ことを特徴とする通信端末。 The communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals,
An intra-group shared key storage means for storing the intra-group shared key;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
An encryption means for encrypting the intra-group shared key using the encryption information;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information obtained by the encryption to the management device,
When the second communication terminal leaving the group occurs, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption Transmitting encrypted shared key information obtained by encrypting the shared key in the group using information for management to the management device, and updating the encrypted shared key information stored in the management device;
A communication terminal characterized by that. - 同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおける、鍵共有方法であり、
前記通信端末のうちの第1の通信端末が、前記グループ内共有鍵を記憶手段に記憶するステップと、
前記第1の通信端末が、前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成するステップと、
前記第1の通信端末が、前記端末個別情報を記憶手段に記憶するステップと、
前記第1の通信端末が、前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成するステップと、
前記第1の通信端末が、前記端末用鍵情報を前記第2の通信端末へ送信するステップと、
前記第1の通信端末が、前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成するステップと、
前記第1の通信端末が、前記暗号化用情報を用いて、前記グループ内共有鍵を暗号化するステップと、
前記第1の通信端末が、前記暗号化により得られた暗号化共有鍵情報を前記管理装置へ送信するステップと、
前記管理装置が、前記第1の通信端末から暗号化共有鍵情報を受信するステップと、
前記管理装置が、該受信された暗号化共有鍵情報を記憶手段に記憶するステップと、
前記管理装置が、該記憶手段に記憶される暗号化共有鍵情報を前記第2の通信端末へ送信するステップと、
前記第2の通信端末が、前記第1の通信端末から端末用鍵情報を受信するステップと、
前記第2の通信端末が、前記管理装置から暗号化共有鍵情報を受信するステップと、
前記第2の通信端末が、該受信された端末用鍵情報と該受信された暗号化共有鍵情報を用いて、前記グループ内共有鍵を復元するステップと、
前記第1の通信端末が、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新するステップと、
前記第1の通信端末が、該更新された暗号化用情報を用いて前記グループ内共有鍵を暗号化した暗号化共有鍵情報を前記管理装置へ送信するステップと、
前記管理装置が、該第1の通信端末から受信した暗号化共有鍵情報によって、前記記憶手段に記憶される暗号化共有鍵情報を更新するステップと、
を含むことを特徴とする鍵共有方法。 A key sharing method in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals,
A first communication terminal of the communication terminals storing the intra-group shared key in a storage means;
The first communication terminal generating individual terminal individual information for each of the second communication terminals of the communication terminals;
The first communication terminal storing the terminal individual information in a storage means;
The first communication terminal using the terminal individual information to generate individual terminal key information for each of the second communication terminals;
The first communication terminal transmitting the terminal key information to the second communication terminal;
The first communication terminal generates encryption information common to the second communication terminal using the terminal individual information;
The first communication terminal encrypting the intra-group shared key using the encryption information;
The first communication terminal transmitting encrypted shared key information obtained by the encryption to the management device;
The management device receiving encrypted shared key information from the first communication terminal;
The management device storing the received encrypted shared key information in a storage means;
The management device transmitting encrypted shared key information stored in the storage means to the second communication terminal;
The second communication terminal receiving terminal key information from the first communication terminal;
The second communication terminal receiving encrypted shared key information from the management device;
The second communication terminal restores the intra-group shared key using the received terminal key information and the received encrypted shared key information;
When the second communication terminal that leaves the group is generated by the first communication terminal, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group. And steps to
The first communication terminal transmitting encrypted shared key information obtained by encrypting the intra-group shared key using the updated encryption information to the management device;
The management device updating encrypted shared key information stored in the storage means with encrypted shared key information received from the first communication terminal;
Including a key sharing method. - 同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおいて、
前記通信端末のうちの第3の通信端末は、前記グループ内共有鍵から第1及び第2の分散鍵を生成し、該第1の分散鍵を前記管理装置へ供給し、該第2の分散鍵を前記通信端末のうちの第1の通信端末へ供給する分散鍵供給手段を有し、
前記第1の通信端末は、
前記第2の分散鍵を記憶する分散鍵記憶手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて、前記第2の分散鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を前記管理装置へ送信する暗号化分散鍵情報送信手段と、を有し、
前記管理装置は、
前記第1の通信端末から暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記受信された暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記第1の分散鍵を記憶する分散鍵記憶手段と、
前記暗号化分散鍵情報記憶手段に記憶される暗号化分散鍵情報を前記第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記分散鍵記憶手段に記憶される第1の分散鍵を前記第2の通信端末へ送信する分散鍵送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記管理装置から暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記管理装置から第1の分散鍵を受信する分散鍵受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化分散鍵情報を用いて、前記第2の分散鍵を復元する復号化手段と、
前記受信された第1の分散鍵と前記復元された第2の分散鍵を結合して、前記グループ内共有鍵を復元する分散鍵結合手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を用いて前記第2の分散鍵を暗号化した暗号化分散鍵情報を前記管理装置へ送信し、前記管理装置に記憶される暗号化分散鍵情報を更新させる、
ことを特徴とする鍵共有システム。 In a key sharing system having a communication terminal belonging to the same group, and a management device that holds information for sharing an intra-group shared key between the communication terminals,
A third communication terminal of the communication terminals generates first and second distributed keys from the intra-group shared key, supplies the first distributed key to the management device, and the second distributed terminal Distributed key supply means for supplying a key to a first communication terminal of the communication terminals;
The first communication terminal is
Distributed key storage means for storing the second distributed key;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption means for encrypting the second distributed key using the encryption information;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information obtained by the encryption to the management device,
The management device
Encrypted distributed key information receiving means for receiving encrypted distributed key information from the first communication terminal;
Encrypted distributed key information storage means for storing the received encrypted distributed key information;
Distributed key storage means for storing the first distributed key;
Encrypted distributed key information transmitting means for transmitting encrypted distributed key information stored in the encrypted distributed key information storage means to the second communication terminal;
Distributed key transmission means for transmitting the first distributed key stored in the distributed key storage means to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted distributed key information receiving means for receiving encrypted distributed key information from the management device;
Distributed key receiving means for receiving a first distributed key from the management device;
Decryption means for restoring the second distributed key using the received terminal key information and the received encrypted distributed key information;
Distributed key combining means for combining the received first distributed key and the recovered second distributed key to recover the intra-group shared key;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the encryption information using terminal individual information of only the second communication terminal remaining in the group. And transmitting the encrypted distributed key information obtained by encrypting the second distributed key to the management apparatus using the updated encryption information, and updating the encrypted distributed key information stored in the management apparatus. Let
A key sharing system characterized by this. - 同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおける、前記通信端末(第1の通信端末)であり、
前記グループ内共有鍵の第2の分散鍵を記憶する分散鍵記憶手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて、前記第2の分散鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を前記管理装置へ送信する暗号化分散鍵情報送信手段と、を有し、
前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を用いて前記第2の分散鍵を暗号化した暗号化分散鍵情報を前記管理装置へ送信し、前記管理装置に記憶される暗号化分散鍵情報を更新させる、
ことを特徴とする通信端末。 The communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals,
Distributed key storage means for storing a second distributed key of the intra-group shared key;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption means for encrypting the second distributed key using the encryption information;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information obtained by the encryption to the management device,
When the second communication terminal leaving the group occurs, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption Transmitting the encrypted distributed key information obtained by encrypting the second distributed key using the information to the management apparatus, and updating the encrypted distributed key information stored in the management apparatus;
A communication terminal characterized by that. - 同一グループに属する通信端末と、グループ内共有鍵を前記通信端末間で共有するための情報を保持する管理装置とを有する鍵共有システムにおける、鍵共有方法であり、
前記通信端末のうちの第3の通信端末が、前記グループ内共有鍵から第1及び第2の分散鍵を生成するステップと、
前記第3の通信端末が、該第1の分散鍵を前記管理装置へ供給し、該第2の分散鍵を前記通信端末のうちの第1の通信端末へ供給するステップと、
前記通信端末のうちの第1の通信端末が、前記グループ内共有鍵の第2の分散鍵を記憶手段に記憶するステップと、
前記第1の通信端末が、前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成するステップと、
前記第1の通信端末が、前記端末個別情報を記憶手段に記憶するステップと、
前記第1の通信端末が、前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成するステップと、
前記第1の通信端末が、前記端末用鍵情報を前記第2の通信端末へ送信するステップと、
前記第1の通信端末が、前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成するステップと、
前記第1の通信端末が、前記暗号化用情報を用いて、前記第2の分散鍵を暗号化するステップと、
前記第1の通信端末が、前記暗号化により得られた暗号化分散鍵情報を前記管理装置へ送信するステップと、
前記管理装置が、前記第1の通信端末から暗号化分散鍵情報を受信するステップと、
前記管理装置が、前記受信された暗号化分散鍵情報を記憶手段に記憶するステップと、
前記管理装置が、前記グループ内共有鍵の第1の分散鍵を記憶手段に記憶するステップと、
前記管理装置が、前記記憶手段に記憶される暗号化分散鍵情報を前記第2の通信端末へ送信するステップと、
前記管理装置が、前記記憶手段に記憶される第1の分散鍵を前記第2の通信端末へ送信するステップと、
前記第2の通信端末が、前記第1の通信端末から端末用鍵情報を受信するステップと、
前記第2の通信端末が、前記管理装置から暗号化分散鍵情報を受信するステップと、
前記第2の通信端末が、前記管理装置から第1の分散鍵を受信するステップと、
前記第2の通信端末が、前記受信された端末用鍵情報と前記受信された暗号化分散鍵情報を用いて、前記第2の分散鍵を復元するステップと、
前記第2の通信端末が、前記受信された第1の分散鍵と前記復元された第2の分散鍵を結合して、前記グループ内共有鍵を復元するステップと、
前記第1の通信端末が、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新するステップと、
前記第1の通信端末が、該更新された暗号化用情報を用いて前記第2の分散鍵を暗号化した暗号化分散鍵情報を前記管理装置へ送信するステップと、
前記管理装置が、該第1の通信端末から受信した暗号化分散鍵情報によって、前記記憶手段に記憶される暗号化分散鍵情報を更新するステップと、
を含むことを特徴とする鍵共有方法。 A key sharing method in a key sharing system having a communication terminal belonging to the same group and a management device that holds information for sharing an intra-group shared key between the communication terminals,
A third communication terminal of the communication terminals generating first and second distributed keys from the intra-group shared key;
The third communication terminal supplies the first distributed key to the management apparatus and supplies the second distributed key to the first communication terminal of the communication terminals;
A first communication terminal of the communication terminals storing a second distributed key of the intra-group shared key in a storage unit;
The first communication terminal generating individual terminal individual information for each of the second communication terminals of the communication terminals;
The first communication terminal storing the terminal individual information in a storage means;
The first communication terminal using the terminal individual information to generate individual terminal key information for each of the second communication terminals;
The first communication terminal transmitting the terminal key information to the second communication terminal;
The first communication terminal generates encryption information common to the second communication terminal using the terminal individual information;
The first communication terminal encrypting the second distributed key using the encryption information; and
The first communication terminal transmitting encrypted distributed key information obtained by the encryption to the management device;
The management device receiving encrypted distributed key information from the first communication terminal;
The management device storing the received encrypted distributed key information in a storage means;
The management device storing a first distributed key of the intra-group shared key in a storage means;
The management device transmitting encrypted distributed key information stored in the storage means to the second communication terminal;
The management device transmitting a first distributed key stored in the storage means to the second communication terminal;
The second communication terminal receiving terminal key information from the first communication terminal;
The second communication terminal receiving encrypted distributed key information from the management device;
The second communication terminal receiving a first distributed key from the management device;
The second communication terminal restores the second distributed key using the received terminal key information and the received encrypted distributed key information;
The second communication terminal combining the received first distributed key and the restored second distributed key to restore the intra-group shared key;
When the second communication terminal that leaves the group is generated by the first communication terminal, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group. And steps to
The first communication terminal transmitting encrypted distributed key information obtained by encrypting the second distributed key using the updated encryption information to the management device;
The management device updating encrypted distributed key information stored in the storage means with encrypted distributed key information received from the first communication terminal;
Including a key sharing method. - 同一グループに属する通信端末と、鍵暗号化装置とを有する鍵共有システムにおける、前記通信端末(第1の通信端末)であり、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を前記鍵暗号化装置へ送信する暗号化用情報送信手段と、を有し、
前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を前記鍵暗号化装置へ送信する、
ことを特徴とする通信端末。 The communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and a key encryption device,
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption information transmitting means for transmitting the encryption information to the key encryption device,
When the second communication terminal leaving the group occurs, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group, and the updated encryption Information to the key encryption device,
A communication terminal characterized by that. - 同一グループに属する通信端末と、鍵暗号化装置とを有する鍵共有システムにおいて、
前記通信端末のうちの第1の通信端末は、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を前記鍵暗号化装置へ送信する暗号化用情報送信手段と、を有し、
前記鍵暗号化装置は、
前記第1の通信端末から前記暗号化用情報を受信する暗号化用情報受信手段と、
前記暗号化用情報を用いて、前記グループのグループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記鍵暗号化装置から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化共有鍵情報を用いて、前記グループ内共有鍵を復元する復号化手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を前記鍵暗号化装置へ送信する、
ことを特徴とする鍵共有システム。 In a key sharing system having a communication terminal belonging to the same group and a key encryption device,
The first communication terminal among the communication terminals is:
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption information transmitting means for transmitting the encryption information to the key encryption device,
The key encryption device includes:
Encryption information receiving means for receiving the encryption information from the first communication terminal;
An encryption means for encrypting an intra-group shared key of the group using the encryption information;
Encrypted shared key information storage means for storing encrypted shared key information obtained by the encryption;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted shared key information receiving means for receiving encrypted shared key information from the key encryption device;
Decrypting means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the encryption information using terminal individual information of only the second communication terminal remaining in the group. And transmitting the updated encryption information to the key encryption device.
A key sharing system characterized by this. - 同一グループに属する通信端末と、鍵暗号化装置とを有する鍵共有システムにおける、前記鍵暗号化装置であり、
前記通信端末のうちの第1の通信端末から暗号化用情報を受信する暗号化用情報受信手段と、
前記暗号化用情報を用いて、前記グループのグループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記通信端末のうちの第2の通信端末へ送信する暗号化共有鍵情報送信手段と、
を備えたことを特徴とする鍵暗号化装置。 In the key sharing system having a communication terminal belonging to the same group and a key encryption device, the key encryption device,
Encryption information receiving means for receiving encryption information from a first communication terminal of the communication terminals;
An encryption means for encrypting an intra-group shared key of the group using the encryption information;
Encrypted shared key information storage means for storing encrypted shared key information obtained by the encryption;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to a second communication terminal of the communication terminals;
A key encryption device comprising: - 同一グループに属する通信端末と、グループ内共有鍵送信装置とを有する鍵共有システムにおいて、
前記グループ内共有鍵送信装置は、
前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段と、
前記グループ内共有鍵を前記通信端末のうちの第1の通信端末へ送信するグループ内共有鍵送信手段と、を有し、
前記第1の通信端末は、
前記グループ内共有鍵送信装置から前記グループ内共有鍵を受信するグループ内共有鍵受信手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて、前記グループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記第1の通信端末から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化共有鍵情報を用いて、前記グループ内共有鍵を復元する復号化手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新する、
ことを特徴とする鍵共有システム。 In a key sharing system having a communication terminal belonging to the same group and an intra-group shared key transmitter,
The intra-group shared key transmitter is
An intra-group shared key generating means for generating an intra-group shared key of the group;
An intra-group shared key transmitting means for transmitting the intra-group shared key to a first communication terminal of the communication terminals,
The first communication terminal is
An intra-group shared key receiving means for receiving the intra-group shared key from the intra-group shared key transmitting apparatus;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
An encryption means for encrypting the intra-group shared key using the encryption information;
Encrypted shared key information storage means for storing encrypted shared key information obtained by the encryption;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted shared key information receiving means for receiving encrypted shared key information from the first communication terminal;
Decrypting means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the information for encryption using the terminal individual information of only the second communication terminal remaining in the group To
A key sharing system characterized by this. - 同一グループに属する通信端末と、グループ内共有鍵送信装置とを有する鍵共有システムにおける、前記通信端末(第1の通信端末)であり、
前記グループ内共有鍵送信装置から前記グループのグループ内共有鍵を受信するグループ内共有鍵受信手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて、前記グループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新する、
ことを特徴とする通信端末。 The communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and an intra-group shared key transmission device,
An intra-group shared key receiving means for receiving the intra-group shared key of the group from the intra-group shared key transmitting apparatus;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
An encryption means for encrypting the intra-group shared key using the encryption information;
Encrypted shared key information storage means for storing encrypted shared key information obtained by the encryption;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal,
When the second communication terminal that leaves the group occurs, the first communication terminal updates the information for encryption using the terminal individual information of only the second communication terminal remaining in the group To
A communication terminal characterized by that. - 同一グループに属する第1の通信端末及び第2の通信端末と、鍵暗号化装置と、管理装置とを有する鍵共有システムにおいて、
前記第1の通信端末は、
前記第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を前記鍵暗号化装置へ送信する暗号化用情報送信手段と、を有し、
前記鍵暗号化装置は、
前記第1の通信端末から前記暗号化用情報を受信する暗号化用情報受信手段と、
前記暗号化用情報を用いて、前記グループのグループ内共有鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記管理装置へ送信する暗号化共有鍵情報送信手段と、を有し、
前記管理装置は、
前記鍵暗号化装置から前記暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記管理装置から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化共有鍵情報を用いて、前記グループ内共有鍵を復元する復号化手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を前記鍵暗号化装置へ送信する、
ことを特徴とする鍵共有システム。 In a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, a key encryption device, and a management device,
The first communication terminal is
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption information transmitting means for transmitting the encryption information to the key encryption device,
The key encryption device includes:
Encryption information receiving means for receiving the encryption information from the first communication terminal;
An encryption means for encrypting an intra-group shared key of the group using the encryption information;
Encrypted shared key information storage means for storing encrypted shared key information obtained by the encryption;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to the management device,
The management device
Encrypted shared key information receiving means for receiving the encrypted shared key information from the key encryption device;
Encrypted shared key information storage means for storing the encrypted shared key information;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted shared key information receiving means for receiving encrypted shared key information from the management device;
Decrypting means for restoring the intra-group shared key using the received terminal key information and the received encrypted shared key information;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the encryption information using terminal individual information of only the second communication terminal remaining in the group. And transmitting the updated encryption information to the key encryption device.
A key sharing system characterized by this. - 同一グループに属する第1の通信端末及び第2の通信端末と、鍵暗号化装置と、管理装置とを有する鍵共有システムにおける、前記管理装置であり、
前記鍵暗号化装置から暗号化共有鍵情報を受信する暗号化共有鍵情報受信手段と、
前記暗号化共有鍵情報を記憶する暗号化共有鍵情報記憶手段と、
前記暗号化共有鍵情報を前記第2の通信端末へ送信する暗号化共有鍵情報送信手段と、
を備えたことを特徴とする管理装置。 The management device in a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, a key encryption device, and a management device,
Encrypted shared key information receiving means for receiving encrypted shared key information from the key encryption device;
Encrypted shared key information storage means for storing the encrypted shared key information;
Encrypted shared key information transmitting means for transmitting the encrypted shared key information to the second communication terminal;
A management apparatus comprising: - 同一グループに属する通信端末と、分散鍵暗号化装置とを有する鍵共有システムにおいて、
前記通信端末のうちの第1の通信端末は、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を前記分散鍵暗号化装置へ送信する暗号化用情報送信手段と、を有し、
前記分散鍵暗号化装置は、
前記第1の通信端末から前記暗号化用情報を受信する暗号化用情報受信手段と、
前記グループのグループ内共有鍵から生成された第1及び第2の分散鍵のうちの前記第2の分散鍵を、前記暗号化用情報を用いて暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記第2の通信端末へ送信する第1の分散鍵送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記分散鍵暗号化装置から暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記分散鍵暗号化装置から第1の分散鍵を受信する分散鍵受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化分散鍵情報を用いて、前記第2の分散鍵を復元する復号化手段と、
前記受信された第1の分散鍵と前記復元された第2の分散鍵を結合して、前記グループ内共有鍵を復元する分散鍵結合手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を前記分散鍵暗号化装置へ送信する、
ことを特徴とする鍵共有システム。 In a key sharing system having communication terminals belonging to the same group and a distributed key encryption device,
The first communication terminal among the communication terminals is:
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption information transmitting means for transmitting the encryption information to the distributed key encryption device,
The distributed key encryption device includes:
Encryption information receiving means for receiving the encryption information from the first communication terminal;
Encryption means for encrypting the second distributed key among the first and second distributed keys generated from the intra-group shared key of the group using the encryption information;
Encrypted distributed key information storage means for storing encrypted distributed key information obtained by the encryption;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal;
First distributed key transmitting means for transmitting the first distributed key to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted distributed key information receiving means for receiving encrypted distributed key information from the distributed key encryption device;
Distributed key receiving means for receiving a first distributed key from the distributed key encryption device;
Decryption means for restoring the second distributed key using the received terminal key information and the received encrypted distributed key information;
Distributed key combining means for combining the received first distributed key and the recovered second distributed key to recover the intra-group shared key;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the information for encryption using the terminal individual information of only the second communication terminal remaining in the group And transmitting the updated encryption information to the distributed key encryption device.
A key sharing system characterized by this. - 同一グループに属する通信端末と、分散分散鍵暗号化装置とを有する鍵共有システムにおける、前記分散分散鍵暗号化装置であり、
前記通信端末のうちの第1の通信端末から暗号化用情報を受信する暗号化用情報受信手段と、
前記グループのグループ内共有鍵から生成された第1及び第2の分散鍵のうちの前記第2の分散鍵を、前記暗号化用情報を用いて暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記通信端末のうちの第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記第2の通信端末へ送信する第1の分散鍵送信手段と、
を備えたことを特徴とする分散鍵暗号化装置。 The distributed distributed key encryption device in a key sharing system having a communication terminal belonging to the same group and a distributed distributed key encryption device;
Encryption information receiving means for receiving encryption information from a first communication terminal of the communication terminals;
Encryption means for encrypting the second distributed key among the first and second distributed keys generated from the intra-group shared key of the group using the encryption information;
Encrypted distributed key information storage means for storing encrypted distributed key information obtained by the encryption;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to a second communication terminal of the communication terminals;
First distributed key transmitting means for transmitting the first distributed key to the second communication terminal;
A distributed key encryption apparatus comprising: - 同一グループに属する通信端末と、分散鍵送信装置とを有する鍵共有システムにおいて、
前記分散鍵送信装置は、
前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段と、
前記グループ内共有鍵から第1及び第2の分散鍵を生成する分散鍵生成手段と、
前記第1及び第2の分散鍵を前記通信端末のうちの第1の通信端末へ送信する分散鍵送信手段と、を有し、
前記第1の通信端末は、
前記分散鍵送信装置から前記第1及び第2の分散鍵を受信する分散鍵受信手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて前記第2の分散鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記第2の通信端末へ送信する第1の分散鍵送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記第1の通信端末から暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記第1の通信端末から第1の分散鍵を受信する分散鍵受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化分散鍵情報を用いて、前記第2の分散鍵を復元する復号化手段と、
前記受信された第1の分散鍵と前記復元された第2の分散鍵を結合して、前記グループ内共有鍵を復元する分散鍵結合手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新する、
ことを特徴とする鍵共有システム。 In a key sharing system having communication terminals belonging to the same group and a distributed key transmission device,
The distributed key transmission device includes:
An intra-group shared key generating means for generating an intra-group shared key of the group;
Distributed key generation means for generating first and second distributed keys from the intra-group shared key;
Distributed key transmitting means for transmitting the first and second distributed keys to a first communication terminal of the communication terminals,
The first communication terminal is
Distributed key receiving means for receiving the first and second distributed keys from the distributed key transmitting apparatus;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption means for encrypting the second distributed key using the encryption information;
Encrypted distributed key information storage means for storing encrypted distributed key information obtained by the encryption;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal;
First distributed key transmitting means for transmitting the first distributed key to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted distributed key information receiving means for receiving encrypted distributed key information from the first communication terminal;
Distributed key receiving means for receiving a first distributed key from the first communication terminal;
Decryption means for restoring the second distributed key using the received terminal key information and the received encrypted distributed key information;
Distributed key combining means for combining the received first distributed key and the recovered second distributed key to recover the intra-group shared key;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the information for encryption using the terminal individual information of only the second communication terminal remaining in the group To
A key sharing system characterized by this. - 同一グループに属する通信端末と、分散鍵送信装置とを有する鍵共有システムにおける、前記通信端末(第1の通信端末)であり、
前記グループのグループ内共有鍵から生成された第1及び第2の分散鍵を、前記分散鍵送信装置から受信する分散鍵受信手段と、
前記通信端末のうちの第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を用いて前記第2の分散鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記第2の通信端末へ送信する第1の分散鍵送信手段と、を有し、
前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新する、
ことを特徴とする通信端末。 The communication terminal (first communication terminal) in a key sharing system having a communication terminal belonging to the same group and a distributed key transmission device,
Distributed key receiving means for receiving, from the distributed key transmitting apparatus, first and second distributed keys generated from an intra-group shared key of the group;
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals of the communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption means for encrypting the second distributed key using the encryption information;
Encrypted distributed key information storage means for storing encrypted distributed key information obtained by the encryption;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal;
First distributed key transmitting means for transmitting the first distributed key to the second communication terminal,
When the second communication terminal leaving the group occurs, the encryption information is updated using the terminal individual information of only the second communication terminal remaining in the group.
A communication terminal characterized by that. - 同一グループに属する第1の通信端末及び第2の通信端末と、分散鍵暗号化装置と、管理装置とを有する鍵共有システムにおいて、
前記第1の通信端末は、
前記第2の通信端末のそれぞれに個別の端末個別情報を生成する端末個別情報生成手段と、
前記端末個別情報を記憶する端末個別情報記憶手段と、
前記端末個別情報を用いて、前記第2の通信端末のそれぞれに個別の端末用鍵情報を生成する端末用鍵情報生成手段と、
前記端末用鍵情報を前記第2の通信端末へ送信する端末用鍵情報送信手段と、
前記端末個別情報を用いて、前記第2の通信端末に共通の暗号化用情報を生成する暗号化用情報生成手段と、
前記暗号化用情報を前記分散鍵暗号化装置へ送信する暗号化用情報送信手段と、を有し、
前記分散鍵暗号化装置は、
前記グループのグループ内共有鍵を生成するグループ内共有鍵生成手段と、
前記グループ内共有鍵から第1及び第2の分散鍵を生成する分散鍵生成手段と、
前記第1の通信端末から前記暗号化用情報を受信する暗号化用情報受信手段と、
前記暗号化用情報を用いて前記第2の分散鍵を暗号化する暗号化手段と、
前記暗号化により得られた暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記管理装置へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記管理装置へ送信する第1の分散鍵送信手段と、を有し、
前記管理装置は、
前記分散鍵暗号化装置から前記暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記分散鍵暗号化装置から前記第1の分散鍵を受信する分散鍵受信手段と、
前記暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記第2の通信端末へ送信する分散鍵送信手段と、を有し、
前記第2の通信端末は、
前記第1の通信端末から端末用鍵情報を受信する端末用鍵情報受信手段と、
前記管理装置から暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記管理装置から第1の分散鍵を受信する分散鍵受信手段と、
前記受信された端末用鍵情報と前記受信された暗号化分散鍵情報を用いて、前記第2の分散鍵を復元する復号化手段と、
前記受信された第1の分散鍵と前記復元された第2の分散鍵を結合して、前記グループ内共有鍵を復元する分散鍵結合手段と、を有し、
前記第1の通信端末は、前記グループから離脱する前記第2の通信端末が発生した場合に、前記グループに残留する前記第2の通信端末のみの端末個別情報を用いて暗号化用情報を更新し、該更新された暗号化用情報を前記分散鍵暗号化装置へ送信する、
ことを特徴とする鍵共有システム。 In a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, a distributed key encryption device, and a management device,
The first communication terminal is
Terminal individual information generating means for generating individual terminal individual information for each of the second communication terminals;
Terminal individual information storage means for storing the terminal individual information;
Terminal key information generating means for generating individual terminal key information for each of the second communication terminals using the terminal individual information;
Terminal key information transmitting means for transmitting the terminal key information to the second communication terminal;
Encryption information generating means for generating encryption information common to the second communication terminal using the terminal individual information;
Encryption information transmitting means for transmitting the encryption information to the distributed key encryption device,
The distributed key encryption device includes:
An intra-group shared key generating means for generating an intra-group shared key of the group;
Distributed key generation means for generating first and second distributed keys from the intra-group shared key;
Encryption information receiving means for receiving the encryption information from the first communication terminal;
Encryption means for encrypting the second distributed key using the encryption information;
Encrypted distributed key information storage means for storing encrypted distributed key information obtained by the encryption;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the management device;
First distributed key transmitting means for transmitting the first distributed key to the management device;
The management device
Encrypted distributed key information receiving means for receiving the encrypted distributed key information from the distributed key encryption device;
Distributed key receiving means for receiving the first distributed key from the distributed key encryption device;
Encrypted distributed key information storage means for storing the encrypted distributed key information;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal;
Distributed key transmission means for transmitting the first distributed key to the second communication terminal,
The second communication terminal is
Terminal key information receiving means for receiving terminal key information from the first communication terminal;
Encrypted distributed key information receiving means for receiving encrypted distributed key information from the management device;
Distributed key receiving means for receiving a first distributed key from the management device;
Decryption means for restoring the second distributed key using the received terminal key information and the received encrypted distributed key information;
Distributed key combining means for combining the received first distributed key and the recovered second distributed key to recover the intra-group shared key;
When the second communication terminal that leaves the group occurs, the first communication terminal updates the information for encryption using the terminal individual information of only the second communication terminal remaining in the group And transmitting the updated encryption information to the distributed key encryption device.
A key sharing system characterized by this. - 同一グループに属する第1の通信端末及び第2の通信端末と、分散鍵暗号化装置と、管理装置とを有する鍵共有システムにおける、前記管理装置であり、
前記分散鍵暗号化装置から暗号化分散鍵情報を受信する暗号化分散鍵情報受信手段と、
前記グループのグループ内共有鍵から生成された第1及び第2の分散鍵のうちの前記第1の分散鍵を、前記分散鍵暗号化装置から受信する分散鍵受信手段と、
前記暗号化分散鍵情報を記憶する暗号化分散鍵情報記憶手段と、
前記暗号化分散鍵情報を前記第2の通信端末へ送信する暗号化分散鍵情報送信手段と、
前記第1の分散鍵を前記第2の通信端末へ送信する分散鍵送信手段と、
を備えたことを特徴とする管理装置。 The management device in a key sharing system having a first communication terminal and a second communication terminal belonging to the same group, a distributed key encryption device, and a management device;
Encrypted distributed key information receiving means for receiving encrypted distributed key information from the distributed key encryption device;
Distributed key receiving means for receiving, from the distributed key encryption device, the first distributed key of the first and second distributed keys generated from the intra-group shared key of the group;
Encrypted distributed key information storage means for storing the encrypted distributed key information;
Encrypted distributed key information transmitting means for transmitting the encrypted distributed key information to the second communication terminal;
Distributed key transmitting means for transmitting the first distributed key to the second communication terminal;
A management apparatus comprising:
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201080020002.7A CN102415048B (en) | 2009-03-03 | 2010-03-03 | Key sharing system, communication terminal, management device and key sharing method |
US13/254,469 US8886931B2 (en) | 2009-03-03 | 2010-03-03 | Key sharing system, communication terminal, management device, key sharing method, and computer program |
JP2011502654A JPWO2010100923A1 (en) | 2009-03-03 | 2010-03-03 | Key sharing system |
KR1020117021565A KR101466780B1 (en) | 2009-03-03 | 2010-03-03 | Key sharing system, communication terminal, management apparatus, key sharing method and computer program |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2009049839 | 2009-03-03 | ||
JP2009-049839 | 2009-03-03 | ||
JP2010-012628 | 2010-01-22 | ||
JP2010012628 | 2010-01-22 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2010100923A1 true WO2010100923A1 (en) | 2010-09-10 |
Family
ID=42709489
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/JP2010/001475 WO2010100923A1 (en) | 2009-03-03 | 2010-03-03 | Key sharing system |
Country Status (5)
Country | Link |
---|---|
US (1) | US8886931B2 (en) |
JP (1) | JPWO2010100923A1 (en) |
KR (1) | KR101466780B1 (en) |
CN (1) | CN102415048B (en) |
WO (1) | WO2010100923A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2013128159A (en) * | 2011-12-16 | 2013-06-27 | Secom Co Ltd | Key management system |
JP2016540420A (en) * | 2013-10-24 | 2016-12-22 | コニンクリーケ・ケイピーエヌ・ナムローゼ・フェンノートシャップ | Controlled certificate supply between user devices |
Families Citing this family (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8842827B2 (en) * | 2010-07-16 | 2014-09-23 | Intryca, Inc. | Mobile phone aided operations system and method |
SG11201403482TA (en) | 2011-12-21 | 2014-07-30 | Ssh Comm Security Oyj | Automated access, key, certificate, and credential management |
WO2017119916A1 (en) * | 2015-01-09 | 2017-07-13 | Spyrus, Inc. | Secure remote authentication |
KR102460096B1 (en) | 2015-05-27 | 2022-10-27 | 삼성에스디에스 주식회사 | Method and apparatus for managing encryption keys for cloud service |
US9858427B2 (en) | 2016-02-26 | 2018-01-02 | International Business Machines Corporation | End-to-end encryption and backup in data protection environments |
US10680804B2 (en) * | 2017-09-27 | 2020-06-09 | Salesforce.Com, Inc. | Distributed key caching for encrypted keys |
US20190305940A1 (en) * | 2018-03-28 | 2019-10-03 | Ca, Inc. | Group shareable credentials |
WO2021033022A1 (en) * | 2019-08-16 | 2021-02-25 | Lenovo ( Singapore) Pte. Ltd. | Security capabilities in an encryption key request |
KR20210046357A (en) * | 2019-10-18 | 2021-04-28 | 삼성전자주식회사 | Method and apparatus for key storing and recovery for blockchain based system |
CN113163399B (en) * | 2020-01-07 | 2024-06-11 | 阿里巴巴集团控股有限公司 | Communication method and device for terminal and server |
EP4283918B1 (en) * | 2022-05-25 | 2024-07-17 | Gurulogic Microsystems Oy | Methods and arrangements for enabling secure digital communications among a group |
Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2000196581A (en) * | 1998-12-25 | 2000-07-14 | Kodo Ido Tsushin Security Gijutsu Kenkyusho:Kk | Method for exclusively sharing key |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2000196580A (en) | 1998-12-24 | 2000-07-14 | Matsushita Electric Ind Co Ltd | Receiver |
EP1059762B1 (en) * | 1998-12-25 | 2009-05-06 | Matsushita Communication Industrial Co., Ltd. | Exclusive key sharing method |
CN1801705B (en) | 2005-01-07 | 2011-01-05 | 华为技术有限公司 | Pre-authentication method |
US20070248232A1 (en) | 2006-04-10 | 2007-10-25 | Honeywell International Inc. | Cryptographic key sharing method |
JP4179563B2 (en) * | 2006-09-21 | 2008-11-12 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Technology for managing cryptographic keys for cryptographic communications |
JP2008103936A (en) | 2006-10-18 | 2008-05-01 | Toshiba Corp | Secret information management device, and secret information management system |
JP4334580B2 (en) | 2007-04-09 | 2009-09-30 | 株式会社東芝 | Key management system and key management method |
-
2010
- 2010-03-03 WO PCT/JP2010/001475 patent/WO2010100923A1/en active Application Filing
- 2010-03-03 KR KR1020117021565A patent/KR101466780B1/en active IP Right Grant
- 2010-03-03 US US13/254,469 patent/US8886931B2/en active Active
- 2010-03-03 JP JP2011502654A patent/JPWO2010100923A1/en active Pending
- 2010-03-03 CN CN201080020002.7A patent/CN102415048B/en not_active Expired - Fee Related
Patent Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2000196581A (en) * | 1998-12-25 | 2000-07-14 | Kodo Ido Tsushin Security Gijutsu Kenkyusho:Kk | Method for exclusively sharing key |
Non-Patent Citations (3)
Title |
---|
JUNQI ZHANG ET AL.: "A Novel Dynamic Key Management Scheme for Secure Multicasting", PROCEEDINGS OF THE LLTH IEEE INTERNATIONAL CONFERENCE ON NETWORKS, 26 February 2004 (2004-02-26), pages 391 - 395 * |
TAKASHI MATSUNAKA ET AL.: "An Authentication Method for a User-driven Service Creation Platform Assisted by Cellular Systems", IEICE TECHNICAL REPORT, vol. 108, no. 44, 15 May 2008 (2008-05-15), pages 7 - 12 * |
TAKASHI MATSUNAKA ET AL.: "Device Authentication and Registration Method Assisted by a Cellular System for User-driven Service Creation Architecture", PROCEEDINGS OF THE 6TH IEEE CONSUMER COMMUNICATIONS AND NETWORKING CONFERENCE, 18 February 2009 (2009-02-18), pages 1 - 5 * |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2013128159A (en) * | 2011-12-16 | 2013-06-27 | Secom Co Ltd | Key management system |
JP2016540420A (en) * | 2013-10-24 | 2016-12-22 | コニンクリーケ・ケイピーエヌ・ナムローゼ・フェンノートシャップ | Controlled certificate supply between user devices |
JP2018201237A (en) * | 2013-10-24 | 2018-12-20 | コニンクリーケ・ケイピーエヌ・ナムローゼ・フェンノートシャップ | Controlled supply of certificate between user devices |
Also Published As
Publication number | Publication date |
---|---|
KR20110127695A (en) | 2011-11-25 |
KR101466780B1 (en) | 2014-11-28 |
US8886931B2 (en) | 2014-11-11 |
CN102415048B (en) | 2014-12-03 |
US20110320815A1 (en) | 2011-12-29 |
JPWO2010100923A1 (en) | 2012-09-06 |
CN102415048A (en) | 2012-04-11 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2010100923A1 (en) | Key sharing system | |
WO2020143246A1 (en) | Method and system for de-anonymization by combining blockchain and secret sharing | |
US8160246B2 (en) | Apparatus and method for generating a key for broadcast encryption | |
US20090060189A1 (en) | Terminal device, group management server, network communication system, and method for generating encryption key | |
US20030081789A1 (en) | Network system, terminal, and method for encryption and decryption | |
EP3813298B1 (en) | Method and apparatus for establishing trusted channel between user and trusted computing cluster | |
WO2009143765A1 (en) | Key distributing method, public key of key distribution centre online updating method and device | |
CN103534975A (en) | Discovery of security associations for key management relying on public keys | |
US9240980B2 (en) | Management of group secrets by group members | |
Sarma et al. | PAC-FIT: An efficient privacy preserving access control scheme for fog-enabled IoT | |
JP4606885B2 (en) | Key distribution system, key management server, and key distribution method | |
WO2023037973A1 (en) | Cloud key management service platform system | |
US11411744B2 (en) | Encryption communication method, information processing apparatus, and program | |
Liu et al. | On the (in) security of recent group key distribution protocols | |
Venkatesan et al. | Analysis of key management protocols for social networks | |
CA2849174C (en) | System and method for the safe spontaneous transmission of confidential data over unsecure connections and switching computers | |
Damodaran et al. | Group key management in wireless networks using session keys | |
CN101162991B (en) | System and method for performing authorization to broadcast service content | |
Thakare et al. | Ternary tree based TGDH protocol for dynamic secure group data sharing in healthcare cloud | |
JP2018142922A (en) | Data distribution system and data distribution method | |
US20240056288A1 (en) | Communication system, information processing apparatus, communication method and program | |
Chaddoud et al. | Efficient secure group management for SSM | |
Cheelu et al. | Secure Sharing of Data for Dynamic Group in Cloud Storage Application | |
Bodur et al. | Implementation Logical Key Hierarchy to a Nosql Database in Cloud Computing | |
CN118337372A (en) | Security traceable group key negotiation method and system based on aggregated broadcast |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 201080020002.7 Country of ref document: CN |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 10748522 Country of ref document: EP Kind code of ref document: A1 |
|
ENP | Entry into the national phase |
Ref document number: 2011502654 Country of ref document: JP Kind code of ref document: A |
|
WWE | Wipo information: entry into national phase |
Ref document number: 13254469 Country of ref document: US |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
ENP | Entry into the national phase |
Ref document number: 20117021565 Country of ref document: KR Kind code of ref document: A |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 10748522 Country of ref document: EP Kind code of ref document: A1 |